Recital 3 Based on standards and technical specifications

Following Article 21(5), third subparagraph of Directive (EU) 2022/2555, the technical and methodological requirements of the cybersecurity means cybersecurity as defined in Article 2, point (1), of Regulation (EU) 2019/881; risk-management measures set out in the Annex to this Regulation are based on European and international standards means an international standard as defined in Article 2, point (1)(a), of Regulation (EU) No 1025/2012;, such as ISO/IEC 27001, ISO/IEC 27002 and ETSI EN 319401, and technical specifications means a technical specification as defined in Article 2, point (4), of Regulation (EU) No 1025/2012;, such as CEN/TS 18026:2024, relevant to the security of network and information systems means the ability of network and information systems to resist, at a given level of confidence, any event that may compromise the availability, authenticity, integrity or confidentiality of stored, transmitted or processed data or of the services offered by, or accessible via, those network and information systems;.