{"id":714299,"date":"2026-09-21T12:36:04","date_gmt":"2026-09-21T12:36:04","guid":{"rendered":"https:\/\/microscopemedia.com\/?p=714299"},"modified":"2026-09-21T12:36:04","modified_gmt":"2026-09-21T12:36:04","slug":"noi-obligatii-pentru-companiile-din-grupuri-de-intreprinderi-cine-raspunde-pentru-securitatea-cibernetica-la-nivel-local","status":"publish","type":"post","link":"https:\/\/microscopemedia.com\/?p=714299","title":{"rendered":"Noi obliga\u021bii pentru companiile din grupuri de \u00eentreprinderi: cine r\u0103spunde pentru securitatea cibernetic\u0103 la nivel local"},"content":{"rendered":"<div class=\"sgb-google-buttons\">\n<div class=\"display-flex justify-center google-logo\"><img decoding=\"async\" loading=\"lazy\" class=\"mg-x-auto\" width=\"30\" height=\"30\" src=\"https:\/\/microscopemedia.com\/wp-content\/uploads\/2026\/09\/noi-obligatii-pentru-companiile-din-grupuri-de-intreprinderi-cine-raspunde-pentru-securitatea-cibernetica-la-nivel-local.png\" alt><\/div>\n<\/p><\/div>\n<p class=\"isSelectedEnd\" id=\"p-0\">Directoratul Na\u021bional de Securitate Cibernetic\u0103 (DNSC) a stabilit modul \u00een care vor fi evaluate aceste cerin\u021be.<\/p>\n<p class=\"isSelectedEnd\" id=\"p-1\">Noile norme au fost aprobate prin <a href=\"https:\/\/legislatie.just.ro\/Public\/DetaliiDocument\/314698\" target=\"_blank\" rel=\"noopener\">Decizia DNSC nr. 3 din 14 septembrie 2026<\/a> \u0219i au fost publicate \u00een Monitorul Oficial luni, 21 septembrie. Ele vizeaz\u0103 situa\u021biile \u00een care guvernan\u021ba, strategia \u0219i managementul riscurilor de securitate cibernetic\u0103 sunt stabilite la nivelul unui grup de \u00eentreprinderi \u0219i apoi aplicate entit\u0103\u021bilor componente.<\/p>\n<h2 id=\"chapter-0\">Trei modalit\u0103\u021bi de aplicare a controalelor<\/h2>\n<p class=\"isSelectedEnd\" id=\"p-2\">DNSC stabile\u0219te trei categorii \u00een care pot intra controalele de securitate cibernetic\u0103: preluate, implementate \u0219i partajate.<\/p>\n<p class=\"isSelectedEnd\" id=\"p-3\">Controalele \u201epreluate\u201d sunt cele gestionate \u0219i garantate la nivelul grupului, pe care entitatea le adopt\u0103 direct. Cele \u201eimplementate\u201d respect\u0103 standardele grupului, dar sunt puse \u00een practic\u0103 \u0219i supravegheate de structurile proprii ale entit\u0103\u021bii. \u00cen cazul controalelor \u201epartajate\u201d, responsabilit\u0103\u021bile sunt \u00eemp\u0103r\u021bite \u00eentre companie \u0219i grup.<\/p>\n<p class=\"isSelectedEnd\" id=\"p-4\">Regula esen\u021bial\u0103 este \u00eens\u0103 comun\u0103: indiferent de model, fiecare entitate r\u0103m\u00e2ne responsabil\u0103 s\u0103 demonstreze c\u0103 respectivele controale func\u021bioneaz\u0103 efectiv \u00een propriul domeniu de activitate.<\/p>\n<h2 id=\"chapter-1\">De la preven\u021bie la reac\u021bia \u00een cazul unui atac<\/h2>\n<p class=\"isSelectedEnd\" id=\"p-5\">Normele acoper\u0103 \u0219ase domenii: guvernare, identificare, protec\u021bie, detec\u021bie, r\u0103spuns \u0219i recuperare.<\/p>\n<p class=\"isSelectedEnd\" id=\"p-6\">Spre exemplu, guvernan\u021ba este de regul\u0103 stabilit\u0103 la nivelul grupului, dar entitatea trebuie s\u0103 adopte formal politicile \u0219i s\u0103 stabileasc\u0103 rolurile \u0219i liniile locale de raportare. Inventarierea activelor, serviciilor, datelor \u0219i furnizorilor \u0219i evaluarea riscurilor sunt realizate \u00een principal local, folosind metodele grupului.<\/p>\n<p class=\"isSelectedEnd\" id=\"p-7\">\u00cen cazul detec\u021biei, monitorizarea poate fi operat\u0103 centralizat, \u00eens\u0103 entitatea trebuie s\u0103 se asigure c\u0103 propriile sisteme sunt acoperite \u0219i s\u0103 stabileasc\u0103 responsabilit\u0103\u021bi locale pentru gestionarea alertelor. Pentru incidente, r\u0103spunsul este coordonat la nivel de grup, dar presupune \u0219i ac\u021biuni concrete la nivel local.<\/p>\n<h2 id=\"chapter-2\">Cum va fi m\u0103surat\u0103 maturitatea securit\u0103\u021bii cibernetice<\/h2>\n<p class=\"isSelectedEnd\" id=\"p-8\">DNSC introduce \u0219i reguli detaliate pentru evaluarea maturit\u0103\u021bii controalelor, de la stadiul 1 \u2013 \u201eIni\u021bial\u201d p\u00e2n\u0103 la stadiul 5 \u2013 \u201eOptimizare\u201d.<\/p>\n<p class=\"isSelectedEnd\" id=\"p-9\">O companie poate ob\u021bine un nivel ridicat de maturitate chiar dac\u0103 utilizeaz\u0103 politici elaborate la nivelul grupului, \u00eens\u0103 trebuie s\u0103 existe documenta\u021bie aplicabil\u0103 formal, dovezi privind implementarea \u0219i, pentru nivelurile superioare, indicatori m\u0103surabili la nivelul entit\u0103\u021bii.<\/p>\n<p class=\"isSelectedEnd\" id=\"p-10\">La stadiul 4, de exemplu, controalele trebuie aplicate consecvent \u00een \u00eentreaga entitate, cu dovezi pentru activit\u0103\u021bi \u0219i metrici colectate \u0219i raportate. Stadiul 5 presupune inclusiv \u00eembun\u0103t\u0103\u021bire continu\u0103 \u0219i contribu\u021bia activ\u0103 a entit\u0103\u021bii la perfec\u021bionarea controalelor grupului.<\/p>\n<p id=\"p-11\">Normele subliniaz\u0103 astfel o distinc\u021bie important\u0103 pentru companiile din Rom\u00e2nia integrate \u00een structuri interna\u021bionale: lipsa unei politici locale proprii nu \u00eenseamn\u0103 automat un nivel sc\u0103zut de maturitate, dac\u0103 politica grupului a fost adoptat\u0103 formal \u0219i este aplicat\u0103 \u0219i demonstrat\u0103 efectiv la nivel local.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Directoratul Na\u021bional de Securitate Cibernetic\u0103 (DNSC) a stabilit modul \u00een care vor fi evaluate aceste cerin\u021be. Noile norme au fost aprobate prin Decizia DNSC nr. 3 din 14 septembrie 2026 &hellip; <a href=\"https:\/\/microscopemedia.com\/?p=714299\" class=\"more-link\">Read More<\/a><\/p>\n","protected":false},"author":1,"featured_media":714300,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"Default","format":"standard","meta":[],"categories":[1],"tags":[],"_links":{"self":[{"href":"https:\/\/microscopemedia.com\/index.php?rest_route=\/wp\/v2\/posts\/714299"}],"collection":[{"href":"https:\/\/microscopemedia.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/microscopemedia.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/microscopemedia.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/microscopemedia.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=714299"}],"version-history":[{"count":0,"href":"https:\/\/microscopemedia.com\/index.php?rest_route=\/wp\/v2\/posts\/714299\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/microscopemedia.com\/index.php?rest_route=\/wp\/v2\/media\/714300"}],"wp:attachment":[{"href":"https:\/\/microscopemedia.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=714299"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/microscopemedia.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=714299"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/microscopemedia.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=714299"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}