Erwägungsgrund 18

Pursuant to Article 21(2), point (g), of Directive (EU) 2022/2555, Member States are to ensure that essential and important entities apply basic cyber hygiene practices and cybersecurity training. Cyber hygiene practices are a part of different technical and methodological requirements of the cybersecurity risk management measures set out in the Annex to this Regulation. With regard to basic cyber hygiene practices, the relevant entities should consider practices such as clear desk and screen policy, use of passwords and other authentication means, safe email use and web browsing, protection from phishing and social engineering, secure teleworking practices.