@@ -640,19 +640,19 @@ NMS protects systems that are relying on network connectivity to perform its dai
**Business continuity**
- market reach information
-Business-critical processes
- market information
-business-critical processes
- manufacturing
- finance
- healthcare
- Compliance evidence if form of logs and reports
- finances
- compliance evidence if form of logs and reports
**Incident response capability**
- ability to detect, diagnose, and remediate outages
**Network inventory and topology**
**Network configuration**
- network configuration
- network inventory
- network topology
- network segmentation policies
@@ -660,6 +660,7 @@ NMS protects systems that are relying on network connectivity to perform its dai
**Connected devices**
- management traffic
- access to the management interface
- connected devices updates, patches
- CORBA access, grcp
@@ -670,15 +671,17 @@ NMS protects systems that are relying on network connectivity to perform its dai
The stored data depends on what functions the NMS has available and what the intend use is.
The stored data can be, but is not limited to:
- Device monitoring data
- Credentials
- System audit data
- authentication data
- syslogs
- cryptographic data like encryption keys
- Backups
- Performance logs
- Syslogs for forensic investigations
- Device monitoring data
- Sensitive monitoring data
- NetFlow information
- Packet captures
- Protocol analysis information
- Network configuration data
The manufacturer shall follow the CRAs pricibles of implementing high level of cybersecurity of products [CRA Resictal 11] <ahref="#_ref_i.1">[i.1]</a>. The protection duty extends to third party integrations regardless of the market status of the component. [CRA Resictal 34] <ahref="#_ref_i.1">[i.1]</a>.
