[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"detail-sidebar-cat-0-en-105":3,"doc-seo-676647-105":59,"doc-detail-676647-en":129},{"code":4,"msg":5,"data":6},0,"success",[7,13,18,23,28,33,38,43,48,51,55],{"id":8,"doc_module":4,"doc_module_name":9,"category_name":10,"show_sort_weight":11,"slug":12},1,"Document","Story & Novel",90,"story-novel",{"id":14,"doc_module":4,"doc_module_name":9,"category_name":15,"show_sort_weight":16,"slug":17},2,"Literature",80,"literature",{"id":19,"doc_module":4,"doc_module_name":9,"category_name":20,"show_sort_weight":21,"slug":22},4,"Exam",70,"exam",{"id":24,"doc_module":4,"doc_module_name":9,"category_name":25,"show_sort_weight":26,"slug":27},5,"Comic",60,"comic",{"id":29,"doc_module":4,"doc_module_name":9,"category_name":30,"show_sort_weight":31,"slug":32},6,"Technology",50,"technology",{"id":34,"doc_module":4,"doc_module_name":9,"category_name":35,"show_sort_weight":36,"slug":37},7,"Healthcare",40,"healthcare",{"id":39,"doc_module":4,"doc_module_name":9,"category_name":40,"show_sort_weight":41,"slug":42},8,"Research & Report",30,"research-report",{"id":44,"doc_module":4,"doc_module_name":9,"category_name":45,"show_sort_weight":46,"slug":47},9,"Religion & Spirituality",20,"religion-spirituality",{"id":46,"doc_module":4,"doc_module_name":9,"category_name":49,"show_sort_weight":46,"slug":50},"World Cup","world-cup",{"id":52,"doc_module":4,"doc_module_name":9,"category_name":53,"show_sort_weight":52,"slug":54},10,"Lifestyle","lifestyle",{"id":56,"doc_module":4,"doc_module_name":9,"category_name":57,"show_sort_weight":24,"slug":58},19,"General","general",{"code":4,"msg":60,"data":61},"ok",{"site_id":62,"language":63,"slug":64,"title":65,"keywords":66,"description":67,"schema_data":68,"social_meta":122,"head_meta":124,"extra_data":126,"updated_unix":128},105,"en","cybersecurity-handbook-best-practices-for-the-protection-and-resilience-of-network-and-information-systems-june-2021","CYBERSECURITY HANDBOOK - BEST PRACTICES FOR THE PROTECTION AND RESILIENCE OF NETWORK AND INFORMATION SYSTEMS - June 2021","","Cybersecurity Handbook: Best Practices for the Protection and Resilience of Network and Information Systems provides practical guidance for public sector organizations and medium-to-large private enterprises to strengthen cybersecurity and privacy. It outlines technical and organizational risk management measures and targets information security and IT units, CISOs and DPOs, and specialized professionals. The handbook’s structure follows defense-in-depth controls in eighteen chapters, each describing the control, associated risks, and specialized sub-controls (basic and enhanced).",{"@graph":69,"@context":121},[70,84,104],{"@type":71,"itemListElement":72},"BreadcrumbList",[73,77,79,82],{"item":74,"name":75,"@type":76,"position":8},"https://docshare.wps.com","Home","ListItem",{"item":78,"name":9,"@type":76,"position":14},"https://docshare.wps.com/document/",{"item":80,"name":30,"@type":76,"position":81},"https://docshare.wps.com/document/technology/",3,{"item":83,"name":65,"@type":76,"position":19},"https://docshare.wps.com/document/cybersecurity-handbook-best-practices-for-the-protection-and-resilience-of-network-and-information-systems-june-2021/676647/",{"url":83,"name":65,"@type":85,"image":86,"author":91,"headline":65,"publisher":94,"fileFormat":97,"inLanguage":63,"description":67,"dateModified":98,"datePublished":98,"encodingFormat":97,"isAccessibleForFree":99,"interactionStatistic":100},"DigitalDocument",{"url":87,"@type":88,"width":89,"height":90},"https://docshare.wps.com/thumbnails/cybersecurity-handbook-best-practices-for-the-protection-and-resilience-of-network-and-information-systems-june-2021/676647.png","ImageObject",300,407,{"name":92,"@type":93},"supergirl","Person",{"url":74,"name":95,"@type":96},"DocShare","Organization","application/pdf","2026-11-04",true,{"@type":101,"interactionType":102,"userInteractionCount":4},"InteractionCounter",{"@type":103},"ViewAction",{"@type":105,"mainEntity":106},"FAQPage",[107,113,117],{"name":108,"@type":109,"acceptedAnswer":110},"Who is the target audience for the Cybersecurity Handbook?","Question",{"text":111,"@type":112},"The handbook is mainly addressed to information security and IT organizational units of ministries and public administration entities, as well as medium and large private enterprises. It also targets CISOs, DPOs, executives responsible for cybersecurity, and specialized professionals such as software engineers.","Answer",{"name":114,"@type":109,"acceptedAnswer":115},"How is the handbook structured across its two parts?",{"text":116,"@type":112},"Part A introduces security architectures for modern IT systems and the basic steps for establishing an information security management system based on risk assessment. Part B provides best practices for technical and organizational protection controls, organized into eighteen chapters.",{"name":118,"@type":109,"acceptedAnswer":119},"What are basic and enhanced sub-controls?",{"text":120,"@type":112},"Basic sub-controls are fundamental measures (marked with the symbol ►) intended to protect against common attack types and should be implemented by every entity. Enhanced sub-controls (also marked with ► in the text) are recommended for critical systems and high-value services and should be implemented based on prior risk assessment and residual risk determination.","https://schema.org",{"og:url":83,"og:type":123,"og:title":65,"og:site_name":95,"og:description":67},"article",{"robots":125,"canonical":83},"index,follow",{"doc_id":127,"site_id":62},676647,1793776340,{"code":4,"msg":5,"data":130},{"doc_id":127,"user_id":131,"nickname":92,"user_avatar":132,"doc_module":4,"category_id":29,"category_name":30,"doc_title":65,"doc_description":67,"doc_content":133,"file_id":134,"file_url":135,"file_type":136,"file_size":137,"view_count":4,"is_deleted":4,"is_public":8,"is_downloadable":8,"audit_status":8,"page_count":138,"language":139,"language_code":63,"site_id":62,"html_lang":63,"table_of_contents":140,"faqs":141,"seo_title":142,"seo_description":67,"update_tm":128,"read_time":143},962088121634,"https://ap-avatar.wpscdn.com/davatar_9964176cb1d06d4a9deccf72a44ae3dc","HELLENIC REPUBLIC  \nMINISTRY OF DIGITAL GOVERNANCE  \nNATIONAL CYBERSECURITY AUTHORITY  \nNATIONAL CYBERSECURITY AUTHORITY HELLENIC REPUBLIC  \nCYBERSECURITY HANDBOOK  \nBEST PRACTICES FOR THE PROTECTION AND  \nRESILIENCE OF NETWORK AND INFORMATION SYSTEMS  \nMINISTRY OF DIGITAL GOVERNANCE-GREECE  \nJUNE 2021  \nTHIS HANDBOOK WAS DEVELOPED BY THE NATIONAL CYBER SECURITY AUTHORITY  \nOF GREECE – MINISTRY OF DIGITAL GOVERNANCE-DIRECTORATE FOR CYBER SECURITY STRATEGIC PLANNING-DEPARTMENT FOR REQUIREMENTS AND SECURITY ARCHITECTURE.  \nCYBERSECURITY HANDBOOK  \nCYBERSECUR ITY HANDBOOK  \n4  \nTABLE OF CONTENTS  \nPREFACE 6  \nPART A – INTRODUCTION  \n1. Security architectures for network and  \ninformation systems 8  \n2. Assessing the risk 12  \nPART B – BEST PRACTICES  \n1. Inventory of hardware and software assets 14  \n2. Secure configuration of devices and applications 17  \n3. Application and services execution control 20  \n4. Access control 23  \n5. User authentication 26  \n6. Network security 29  \n7. Malware protection 34  \n8. Maintenance and analysis of event logs 37  \n9. Web application security 39  \n10. Teleworking 43  \n11. Use of cryptography 48  \n12. Cybersecurity skills and awareness training 51  \n13. Supply chain risk management 53  \n14. Cybersecurity technical assessments 56  \n15. Physical security measures 59  \n16. Data backups 61  \n17. Incident handling 63  \n18. Business continuity and disaster recovery 66  \nREFERENCES 68  \nCYBERSECUR ITY HANDBOOK  \n5  \nCYBERSECUR ITY HANDBOOK  \n6  \nTARGET AUDIENCE  \nSTRUCTURE  \n1 In this handbook the terms \"organization\",“entity” and \"corporation\" are considered to have the same meaning and are used interchangeably throughout the text.  \nPREFACE  \nAs information and communication technologies create a world of everincreasing complexity in interconnected systems and devices, the public debate on cybersecurity and privacy issues is constantly at the forefront, highlighting the need to strengthen the protection and resilience of these systems from the constantly evolving threats of modern cyberspace.  \nAt such a time, the National Cybersecurity Authority of Greece offers acybersecurity handbook containing best practices in technical and organizational risk management measures and addressed to public sector organizations as well as medium and large private enterprises.  \nThis handbook is mainly addressed to:  \na) the information security and IT organizational units of ministries, other public administration entities1 , as well as medium and large private sector enterprises,  \nb) chief information security officers (CISOs), data protection officers (DPOs), as well as other executives who deal with the cybersecurity of network and information systems of public and private sector organizations.  \nIn addition, specific categories of professionals, such as software engineers, will find useful specialized content, such as chapter 9 \"Web Application Security\", while simultaneously teleworking employees of the above organizations are expected to find useful content in chapter 10 \"Teleworking\".  \nFinally, this handbook, although being a text containing practical instructions, is at the same time addressed to the cybersecurity research community, as well as to people who are generally interested in studying one of the most modern and fascinating scientific fields of our time.  \nThe handbook’s contents are organized as follows:  \nPart A: it’s the handbook’s introductory part. Security architectures for modern IT systems are briefly described, as well as the basic steps for organizations for the establishment of a comprehensive information security management system based on risk assessment.  \nPart B: it’s the main body of the handbook. A set of best practices in technical and organizational protection controls is developed, based on the defense-in-depth architecture, which are divided into eighteen (18) chapters that correspond to equivalent security control families. Each chapter adheres to the following structure: ","cbCaioueGEZgYMDt","https://ap.wps.com/l/cbCaioueGEZgYMDt","pdf",1049405,76,"English","# Preface\n# Part A – Introduction\n## 1. Security architectures for network and information systems\n## 2. Assessing the risk\n# Part B – Best Practices\n## 1. Inventory of hardware and software assets\n## 2. Secure configuration of devices and applications\n## 3. Application and services execution control\n## 4. Access control\n## 5. User authentication\n## 6. Network security\n## 7. Malware protection\n## 8. Maintenance and analysis of event logs\n## 9. Web application security\n## 10. Teleworking\n## 11. Use of cryptography\n## 12. Cybersecurity skills and awareness training\n## 13. Supply chain risk management\n## 14. Cybersecurity technical assessments\n## 15. Physical security measures\n## 16. Data backups\n## 17. Incident handling\n## 18. Business continuity and disaster recovery\n# References","[{\"question\":\"Who is the target audience for the Cybersecurity Handbook?\",\"answer\":\"The handbook is mainly addressed to information security and IT organizational units of ministries and public administration entities, as well as medium and large private enterprises. It also targets CISOs, DPOs, executives responsible for cybersecurity, and specialized professionals such as software engineers.\"},{\"question\":\"How is the handbook structured across its two parts?\",\"answer\":\"Part A introduces security architectures for modern IT systems and the basic steps for establishing an information security management system based on risk assessment. Part B provides best practices for technical and organizational protection controls, organized into eighteen chapters.\"},{\"question\":\"What are basic and enhanced sub-controls?\",\"answer\":\"Basic sub-controls are fundamental measures (marked with the symbol ►) intended to protect against common attack types and should be implemented by every entity. Enhanced sub-controls (also marked with ► in the text) are recommended for critical systems and high-value services and should be implemented based on prior risk assessment and residual risk determination.\"}]","CYBERSECURITY HANDBOOK - BEST PRACTICES FOR THE PROTECTION AND RESILIENCE OF NETWORK AND INFORMATION SYSTEMS - June 2021 | PDF",192]