nistgħu l-bosta fakklieti tal-kumpanija tiegħa jużaw l-istess fajl

Dokument wieħed jista', iżda mhux awtomatikament għal kollox

Iva, diversi siti jistgħu jaħdmu b'dokument wieħed, iżda dan jiddependi fuq dak li tistaqsi eżattament il-mistoqsija: il-persuna juridika jew is-sit. Ħafna listi ta' mistoqsijiet jistaqsu dwar l-intrapriża kollha — allura dokument wieħed fil-livell tal-persuna juridika jkun suffiċjenti, b'fiha l-risposta għal f'liema pajjiżi għandha r-residenza l-impriżaMistoqsijiet oħra huma eżattament relatati mas-sit: l-indirizz tas-sit, iċċertifikazzjoni lokali, jew pjan ta' kontinwità lokali. Ma tistax tkopprihom b'risposta ċentrali waħda mingħajr spjegazzjoni.

Il-problem ġeneralment jinsab fi tliet kategoriji ta' mistoqsijiet. L-ewwel identifikazzjoni mistoqsijiet bħal l-indirizz tal-stabbiliment tal-intrapriża — hawn irrid tindika jekk il-kliyent ifisser il-kwartier ġenerali jew is-sit li jipprovdi. It-tieni: iċċertifikazzjoni ISO: ċertifikat ISO 9001 jista' jkun fuq sit wieħed jew fuq l-organizzazzjoni kollha, u din id-differenza taraha fit-tarġima għall-mistoqsija dwar jew l-intrapriża hija ssertifikata ISO 9001. Fit-thirdly the NIS2 measures: if establishments manage separate networks and systems, one establishment can comply with the ten measures of Article 21(2) and the other cannot. A single shared file then only works if you indicate per establishment which part of the answer applies.

Where the distinction legal entity-establishment comes from

The Trade Register Act 2007 registers business and establishment as separate data: a legal entity can have multiple establishments, each with its own establishment number and address. That separation is the reason that a file at legal entity level does not automatically apply to a question that specifically concerns one establishment. For NIS2, the establishment sensitivity follows from Article 21(2) of Directive (EU) 2022/2555: the ten measures apply to the network and information system that provides the service, and that can differ per establishment. For ISO 27001, the scope of the Annex A certificate is decisive: whether it applies to one location or the entire organisation is stated on the certificate itself.