nis2-impl

Annex 12.2.1

Full text: this article's wording is third-party regulatory text. See the official source for the authoritative provision.

Mapped SPARTA techniques (8)

Techniques referencing this article

  • EX-0012.06Science/Payload DataST0004
    addresses
    moderate
    derived

    Asset-handling policy governs how payload products are stored, transported and disseminated, which is the procedural envelope around in-place modification of science/payload outputs.

  • EXF-0007Compromised Ground SystemST0008
    addresses
    moderate
    derived

    Asset-handling policy governs how mission-data files, telemetry archives and payload products are stored, transported and disseminated, which is the procedural envelope around mass exfiltration via ground-system trusted positions.

  • IMP-0006TheftST0009
    addresses
    high
    direct

    Asset-handling policy covers the entire life cycle of mission data (acquisition, use, storage, transportation, disposal); strict handling discipline is the operational lever that resists theft along every stage of the data-distribution chain.

  • Handling-of-assets policy is the procedural lever that constrains how design information moves between primes, subs, partner missions and contractor laptops, which is exactly the leakage surface a design-reconnaissance adversary exploits.

  • REC-0001.05Thermal Control SystemST0001
    addresses
    moderate
    derived

    Handling-of-assets policy governs how thermal control documentation moves between integrators and contractors, which is the leakage surface for thermal reconnaissance.

  • REC-0001.07PayloadST0001
    addresses
    moderate
    derived

    Handling-of-payload-asset policy governs how payload command-set documentation moves between operator, payload vendor and customer environments.

  • REC-0002.03OperationsST0001
    addresses
    moderate
    derived

    Operational rhythms, eclipse seasons and maintenance windows are internal scheduling assets whose handling controls determine whether opex-style reconnaissance can profile entity activity.

  • REC-0008Gather Supply Chain InformationST0001
    addresses
    moderate
    derived

    Handling-of-assets policy applies to supplier directories, contract registers and AIT records — the exact artefacts a supply-chain recon adversary harvests.

Built 2026-07-25 from 216 techniques, 334 regulation articles, 125 ENISA controls, 2,610 framework controls, and 90 countermeasures.