Annex to the ActAnnex I - high-criticality sector
Competent CSIRTNational Cyber Security Centre (NCSC-HR)
Sectoral authorityCroatian Civil Aviation Agency for air transport
The measures that carry most of the work in this sector
06Network security
Traffic management and signalling systems are separated from business systems - more often in documentation than in reality.
08Supply chain
Logistics depends on many partners with access to shipment tracking systems.
11Incident handling
An incident that halts transport has cross-border effect, which changes the content of the notification.
12Business continuity
Recovery must also cover manual operation until the system is back.
What we most often find
- Shipment tracking systems available to partners with no scope limitation
- No procedure for manual operation during a system outage
- Legacy signalling systems without segmentation
- A significance criterion that ignores cross-border effect
Check for yourself
Tri alata koja rade u pregledniku, bez registracije:
Entity categorisation check
Incident reporting deadline calculator
Readiness check against the 13 measures
Not sure where you stand?
Half an hour of conversation, with no obligation. By the end you know what needs doing and in what order.