The RSI security weblog breaks down the steps in some detail, but the method in essence goes like this: The information security authorities, working collectively in the eu Details Defense Board, should ensure that the information defense principles in the EU are applied in an harmonised and helpful way, and https://www.nathanlabsadvisory.com/cisa-certified-information-system-auditor.html