natgillin/translations-raw huggingface dataset:
Tecn.
Addeo F., Moio L., Chianese L., Stingo C., Resmini P., Berner I, Krause I., Di Luccia A. in Bocca A., „Use of plasmin to increase the sensitivity of the detection of bovine milk in ovine and/or caprine cheese by gel isoelectric focusing of γ2-caseins“, Milchwissenschaft 45, 1990, str.
Another flow rate may be used, dependent of the internal diameter of the columns used or the instructions of the manufacturer of the column.
RIII = W/(AIII[5] - AIII[0])
Eluent A: 150 ml of acetonitrile (CH3CN), 20 ml of isopropanol (CH3CHOHCH3), and 1,00 ml of trifluoroacetic acid (TFA, CF3COOH) are placed in a 1000 ml volumetric flask.
43–56.
Commission Implementing Regulation (EU) 2018/151
Izvedbena uredba Komisije (EU) 2018/151
laying down rules for application of Directive (EU) 2016/1148 of the European Parliament and of the Council as regards further specification of the elements to be taken into account by digital service providers for managing the risks posed to the security of network and information systems and of the parameters for determining whether an incident has a substantial impact
o določitvi pravil za uporabo Direktive (EU) 2016/1148 Evropskega parlamenta in Sveta v zvezi z dodatno specifikacijo elementov, ki jih morajo upoštevati ponudniki digitalnih storitev pri obvladovanju tveganj za varnost omrežij in informacijskih sistemov, in parametrov za določanje, ali ima incident pomemben vpliv
Having regard to Directive (EU) 2016/1148 of the European Parliament and of the Council of 6 July 2016 concerning measures for a high common level of security of network and information systems across the Union, and in particular Article 16(8) thereof,
ob upoštevanju Direktive (EU) 2016/1148 Evropskega parlamenta in Sveta z dne 6. julija 2016 o ukrepih za visoko skupno raven varnosti omrežij in informacijskih sistemov v Uniji ter zlasti člena 16(8) Direktive,
In accordance with Directive (EU) 2016/1148, digital service providers remain free to take technical and organisational measures they consider appropriate and proportionate to manage the risk posed to the security of their network and information systems, as long as those measures ensure an appropriate level of security and take into account the elements provided for in that Directive.
V skladu z Direktivo (EU) 2016/1148 bi morali ponudnikom digitalnih storitev omogočiti, da se sami odločijo za sprejetje tehničnih in organizacijskih ukrepov, ki so po njihovem mnenju ustrezni in sorazmerni za obvladovanje tveganj za varnost njihovih omrežij in informacijskih sistemov, če navedeni ukrepi zagotavljajo ustrezno raven varnosti in upoštevajo elemente iz navedene direktive.
When identifying the appropriate and proportionate technical and organisational measures, the digital service provider should approach information security in a systematic way, using a risk-based approach.
Pri določanju ustreznih in sorazmernih tehničnih in organizacijskih ukrepov bi moral ponudnik digitalnih storitev obravnavati informacijsko varnost na sistematičen način in pri tem uporabiti pristop, ki temelji na tveganju.
In order to ensure the security of systems and facilities, digital service providers should perform assessment and analysis procedures.
Za zagotovitev varnosti sistemov in zmogljivosti bi morali ponudniki digitalnih storitev izvajati ocenjevalne in analitske postopke.
These activities should concern the systematic management of network and information systems, the physical and environmental security, the security of supplies and the access controls.
Te dejavnosti bi morale zadevati sistematsko upravljanje omrežij in informacijskih sistemov, fizično in okoljsko varnost, zanesljivost oskrbe in nadzor dostopa.
When carrying out a risk analysis within the systematic management of network and information systems, digital service providers should be encouraged to identify specific risks and quantify their significance, for example by identifying threats to critical assets and how they may affect the operations, and determining how best to mitigate those threats based on current capabilities and resource requirements.
Pri izvajanju analize tveganj znotraj sistematskega upravljanja omrežij in informacijskih sistemov bi bilo treba ponudnike digitalnih storitev spodbujati, da določijo specifična tveganja in količinsko opredelijo njihov pomen, na primer z opredelitvijo tveganj za kritična sredstva in načinov, kako lahko ta vplivajo na dejavnosti, in določijo najboljši način za zmanjšanje navedenih tveganj na podlagi trenutnih sposobnosti in zahtev glede virov.
Policies on human resources could refer to the management of skills, including aspects related to the development of security related skills and awareness-raising.
Kadrovske politike bi se lahko nanašale na upravljanje veščin, vključno z vidiki, povezanimi z razvojem veščin glede varnosti in ozaveščanjem.
When deciding on an appropriate set of policies on security of operation, the digital service providers should be encouraged to take into account aspects of change management, vulnerability management, formalisation of operating and administrative practices and system mapping.
Pri odločanju o ustreznem sklopu politik v zvezi z varnostjo izvajanja dejavnosti bi bilo treba ponudnike digitalnih storitev spodbujati, da upoštevajo vidike upravljanja sprememb, upravljanja ranljivosti, formalizacije postopkov izvajanja dejavnosti in upravnih postopkov ter organizacije sistema.
Policies on security architecture could comprise in particular the segregation of networks and systems as well as specific security measures for critical operations such as administration operations.
Politike na področju varnosti bi lahko obsegale zlasti ločevanje med omrežji in sistemi ter posebne varnostne ukrepe za ključne dejavnosti, kot so upravne dejavnosti.
The segregation of networks and systems could enable a digital service provider to distinguish between elements such as data flows and computing resources that belong to a client, group of clients, the digital service provider or third parties.
Z ločevanjem med omrežji in sistemi bi se lahko ponudnikom digitalnih storitev omogočilo razlikovanje med elementi, kot so podatkovni tokovi in računalniški viri, ki pripadajo stranki, skupini strank, ponudniku digitalnih storitev ali tretjim stranem.
The measures taken with regard to the physical and environmental security should ensure the security of an organisation's network and information systems from damage caused by incidents such as theft, fire, flood or other weather effects, telecommunications or power failures.
Ukrepi, sprejeti v zvezi s fizično in okoljsko varnostjo, bi morali zagotoviti varovanje omrežij in informacijskih sistemov organizacije pred škodo, ki jo povzročijo incidenti, kot so kraja, požar, poplava ali druge vremenske razmere ter telekomunikacijske napake ali izpadi oskrbe z električno energijo.
The security of supplies such as electrical power, fuel or cooling could encompass the security of the supply chain that includes in particular the security of third party contractors and subcontractors and their management.
Zanesljivost oskrbe npr. z električno energijo, gorivom ali hlajenjem bi lahko vključevala varnost oskrbovalne verige, ki vključuje zlasti varnost tretjih izvajalcev in podizvajalcev ter njihovega vodstva.
The traceability of critical supplies refers to the ability of the digital service provider to identify and record sources of those supplies.
Sledljivost kritične oskrbe pomeni sposobnost ponudnika digitalnih storitev, da določi in evidentira vire navedene oskrbe.
The users of digital services should encompass natural and legal persons who are customers of or are subscribers to an online marketplace or a cloud computing service, or who are visitors to an online search engine website in order to undertake keyword searches.
Uporabniki digitalnih storitev bi morali zajemati fizične in pravne osebe, ki so stranke ali naročniki spletnega trga ali storitve računalništva v oblaku ali ki so obiskovalci spletne strani preko spletnega iskalnika z namenom iskanja po ključnih besedah.
When defining the substantiality of the impact of an incident, the cases laid down in this regulation should be considered as a non-exhaustive list of substantial incidents.
Pri določanju pomembnosti vpliva incidenta bi morali primeri, določeni v tej uredbi, veljati za neizčrpen seznam pomembnih incidentov.
Lessons should be drawn from the implementation of this Regulation and from the work of the Cooperation Group as regards the collection of best practice information on risks and incidents and the discussions on modalities for reporting notifications of incidents as referred to in points (i) and (m) of Article 11(3) of Directive (EU) 2016/1148.
Pridobiti bi bilo treba izkušnje pri izvajanju te uredbe in delu skupine za sodelovanje, kar zadeva zbiranje informacij o najboljših praksah v zvezi s tveganji in incidenti ter obravnavo načinov poročanja o priglasitvah incidentov iz člena 11(3)(i) in (m) Direktive (EU) 2016/1148.
The result could be comprehensive guidelines on quantitative thresholds of notification parameters that may trigger the notification obligation for digital service providers under Article 16(3) of Directive (EU) 2016/1148.
Tako bi lahko nastale celovite smernice o količinskih pragih parametrov za priglasitev, ki bi lahko sprožili obveznost priglasitve za ponudnike digitalnih storitev v skladu s členom 16(3) Direktive (EU) 2016/1148.
Where appropriate, the Commission could also consider reviewing the thresholds currently laid down in this Regulation.
Kadar je to primerno, lahko Komisija prav tako razmisli o pregledu pragov, določenih v tej uredbi.
In order to enable competent authorities to be informed about potential new risks, the digital service providers should be encouraged to voluntarily report any incident whose characteristics have been previously unknown to them such as new exploits, attack-vectors or threat actor, vulnerabilities and hazards.
Da bi bili pristojni organi obveščeni o možnih novih tveganjih, bi bilo treba ponudnike digitalnih storitev spodbujati, da prostovoljno poročajo o vseh incidentih, katerih značilnosti so jim bile prej neznane, npr. novi načini izkoriščanja, vektorji napada ali akterji, ki predstavljajo nevarnost, ranljivosti in tveganja.
This Regulation should apply on the day following the expiry of the deadline for transposition of Directive (EU) 2016/1148.
Ta uredba bi se morala uporabljati od dneva po poteku roka za prenos Direktive (EU) 2016/1148.
The measures provided for in this Regulation are in accordance with the opinion of the Network and Information Systems Security Committee referred to Article 22 of Directive (EU) 2016/1148,
Ukrepi, predvideni s to uredbo, so v skladu z mnenjem Odbora za varnost omrežij in informacijskih sistemov iz člena 22 Direktive (EU) 2016/1148 –
This Regulation specifies further the elements to be taken into account by digital service providers when identifying and taking measures to ensure a level of security of network and information systems which they use in the context of offering services referred to in Annex III to Directive (EU) 2016/1148 and specifies further the parameters to be taken into account to determine whether an incident has a substantial impact on the provision of those services.
Ta uredba dodatno opredeljuje elemente, ki jih morajo ponudniki digitalnih storitev upoštevati pri določanju in sprejemanju ukrepov za zagotovitev določene ravni varnosti omrežij in informacijskih sistemov, ki jih uporabljajo pri zagotavljanju storitev iz Priloge III k Direktivi (EU) 2016/1148 in dodatno opredeljuje parametre, ki jih je treba upoštevati pri določanju, ali ima incident pomemben vpliv na zagotavljanje navedenih storitev.
Security elements
Varnostni elementi
Security of systems and facilities referred to in point (a) of Article 16(1) of Directive (EU) 2016/1148 means the security of network and information systems and of their physical environment and shall include the following elements:
Varnost sistemov in zmogljivosti iz člena 16(1)(a) Direktive (EU) 2016/1148 pomeni varnost omrežij in informacijskih sistemov ter njihovega fizičnega okolja in vsebuje naslednje elemente:
the systematic management of network and information systems, which means a mapping of information systems and the establishment of a set of appropriate policies on managing information security, including risk analysis, human resources, security of operations, security architecture, secure data and system life cycle management and where applicable, encryption and its management;
sistematično upravljanje omrežij in informacijskih sistemov, kar pomeni razporejanje informacijskih sistemov in določitev niza ustreznih politik glede upravljanja informacijske varnosti, vključno z analizo tveganja, človeškimi viri, varnostjo izvajanja dejavnosti, varnostno arhitekturo, varovanjem podatkov in upravljanjem življenjskega cikla sistema ter, kjer je to primerno, šifriranjem in njegovim upravljanjem;
physical and environmental security, which means the availability of a set of measures to protect the security of digital service providers' network and information systems from damage using an all-hazards risk-based approach, addressing for instance system failure, human error, malicious action or natural phenomena;
fizično in okoljsko varnost, kar pomeni razpoložljivost niza ukrepov za zaščito varnosti omrežij in informacijskih sistemov ponudnikov digitalnih storitev pred škodo z uporabo pristopa upoštevanja vseh nevarnosti, ki temelji na tveganju, s katerim se obravnavajo na primer sistemske napake, človeške napake, zlonamerna dejanja ali naravni pojavi;
the security of supplies, which means the establishment and maintenance of appropriate policies in order to ensure the accessibility and where applicable the traceability of critical supplies used in the provision of the services;
zanesljivost oskrbe, kar pomeni vzpostavitev in ohranjanje ustreznih politik za zagotovitev dostopnosti do kritične oskrbe, ki se uporablja pri zagotavljanju storitev, in po potrebi njene sledljivosti;
the access controls to network and information systems, which means the availability of a set of measures to ensure that the physical and logical access to network and information systems, including administrative security of network and information systems, is authorised and restricted based on business and security requirements.
nadzor dostopa do omrežij in informacijskih sistemov, kar pomeni razpoložljivost niza ukrepov za zagotovitev, da je fizični in logični dostop do omrežij in informacijskih sistemov, vključno z upravno varnostjo omrežij in informacijskih sistemov, dovoljen in omejen na podlagi poslovnih in varnostnih zahtev.
With regard to incident handling referred to in point (b) of Article 16(1) of Directive (EU) 2016/1148, the measures taken by the digital service provider shall include:
Kar zadeva obvladovanje incidentov iz člena 16(1)(b) Direktive (EU) 2016/1148, ukrepi, ki jih je sprejel ponudnik digitalnih storitev, vključujejo:
detection processes and procedures maintained and tested to ensure timely and adequate awareness of anomalous events;
procese in postopke odkrivanja, ki se ohranjajo in preskušajo, da bi se zagotovilo pravočasno in ustrezno odkrivanje neobičajnih dogodkov;
processes and policies on reporting incidents and identifying weaknesses and vulnerabilities in their information systems;
procese in politike v zvezi s poročanjem o incidentih ter ugotovljenih šibkih točkah in ranljivostih v njihovih informacijskih sistemih;
a response in accordance with established procedures and reporting the results of the measure taken;
odziv v skladu z vzpostavljenimi postopki in poročanje o rezultatih sprejetih ukrepov;
an assessment of the incident's severity, documenting knowledge from incident analysis and collection of relevant information which may serve as evidence and support a continuous improvement process.
oceno pomembnosti incidenta z dokumentacijo izsledkov analize incidenta in zbiranje ustreznih informacij, ki lahko služijo kot dokaz in podpirajo proces stalnega izboljševanja.
Business continuity management referred to in point (c) of Article 16(1) of Directive (EU) 2016/1148 means the capability of an organisation to maintain or as appropriate restore the delivery of services at acceptable predefined levels following a disruptive incident and shall include:
Upravljanje neprekinjenega poslovanja iz člena 16(1)(c) Direktive (EU) 2016/1148 pomeni sposobnost organizacije, da po incidentu z negativnim vplivom ohrani ali po potrebi ponovno vzpostavi zagotavljanje storitev na sprejemljivih vnaprej določenih ravneh in vključuje:
the establishment and the use of contingency plans based on a business impact analysis for ensuring the continuity of the services provided by digital service providers which shall be assessed and tested on a regular basis for example, through exercises;
pripravo in uporabo načrtov izrednih ukrepov, ki temeljijo na analizi poslovnega učinka za zagotovitev stalnosti storitev, ki jih zagotavljajo ponudniki digitalnih storitev ter se redno ocenjujejo in preskušajo, na primer z vajami;
disaster recovery capabilities which shall be assessed and tested on a regular basis for example, through exercises.
sanacijske zmogljivosti po incidentih, ki se redno ocenjujejo in preskušajo, na primer z vajami.
The monitoring, auditing and testing referred to in point (d) of Article 16(1) of Directive (EU) 2016/1148 shall include the establishment and maintenance of policies on:
Spremljanje, revidiranje in preskušanje iz člena 16(1)(d) Direktive (EU) 2016/1148 vključuje oblikovanje in ohranjanje politik o:
the conducting of a planned sequence of observations or measurements to assess whether network and information systems are operating as intended;
izvajanju načrtovanega zaporedja opazovanj ali meritev za oceno, ali omrežja in informacijski sistemi delujejo, kot je bilo predvideno;
inspection and verification to check whether a standard or set of guidelines is being followed, records are accurate, and efficiency and effectiveness targets are being met;
inšpekcijskih pregledih in preverjanjih z namenom, da se preveri, ali se standard ali niz smernic upošteva, ali so evidence točne ter ali so cilji učinkovitosti in uspešnosti izpolnjeni;
a process intended to reveal flaws in the security mechanisms of a network and information system that protect data and maintain functionality as intended.
postopku za odkrivanje pomanjkljivosti v varnostnih mehanizmih omrežij in informacijskih sistemov, ki varujejo podatke in ohranjajo funkcije, kot je bilo predvideno.
Such process shall include technical processes and personnel involved in the operation flow.
Tak proces vključuje tehnične postopke in osebje, vključeno v tok upravljanja.
International standards referred to in point (e) of Article 16(1) of Directive (EU) 2016/1148 mean standards that are adopted by an international standardisation body as referred to in point (a) of Article 2(1) of Regulation (EU) No 1025/2012 of the European Parliament and of the Council.
Mednarodni standardi iz člena 16(1)(e) Direktive (EU) 2016/1148 pomenijo standarde, ki jih sprejme mednarodni organ za standardizacijo iz člena 2(1)(a) Uredbe (EU) št. 1025/2012 Evropskega parlamenta in Sveta.
Pursuant to Article 19 of Directive (EU) 2016/1148, European or internationally accepted standards and specifications relevant to the security of network and information systems, including existing national standards, may also be used.
V skladu s členom 19 Direktive (EU) 2016/1148 se lahko uporabijo tudi evropski ali mednarodno sprejeti standardi in specifikacije, pomembni za varnost omrežij in informacijskih sistemov, vključno z obstoječimi nacionalnimi standardi.
Digital service providers shall ensure that they have adequate documentation available to enable the competent authority to verify compliance with the security elements set out in paragraphs 1, 2, 3, 4 and 5.
Ponudniki digitalnih storitev zagotovijo, da imajo na voljo ustrezno dokumentacijo, ki pristojnemu organu omogoči preverjanje skladnosti z varnostnimi elementi iz odstavkov 1, 2, 3, 4 in 5.
Parameters to be taken into account to determine whether the impact of an incident is substantial
Parametri, ki jih je treba upoštevati pri določanju, ali ima incident pomemben vpliv
With regard to the number of users affected by an incident, in particular users relying on the service for the provision of their own services referred to in point (a) of Article 16(4) of Directive (EU) 2016/1148, the digital service provider shall be in a position to estimate either of the following:
Glede na število prizadetih uporabnikov, zlasti uporabnikov, ki so od storitve odvisni pri zagotavljanju lastnih storitev iz člena 16(4)(a) Direktive (EU) 2016/1148, je ponudnik digitalnih storitev sposoben, da oceni eno od naslednjih:
the number of affected natural and legal persons with whom a contract for the provision of the service has been concluded; or
število prizadetih fizičnih in pravnih oseb, s katerimi je bila sklenjena pogodba za zagotavljanje storitve ali
the number of affected users having used the service based in particular on previous traffic data.
število preteklih prizadetih uporabnikov storitve, ki temelji zlasti na podatkih o preteklem prometu.
The duration of an incident referred to in point (b) of Article 16(4) means the time period from the disruption of the proper provision of the service in terms of availability, authenticity, integrity or confidentiality until the time of recovery.
Trajanje incidenta iz člena 16(4)(b) pomeni časovno obdobje od prekinitve ustreznega zagotavljanja storitve v smislu razpoložljivosti, avtentičnosti, celovitosti ali zaupnosti do trenutka njene ponovne vzpostavitve.
As far as the geographical spread with regard to the area affected by the incident referred to in point (c) of Article 16(4) of Directive (EU) 2016/1148 is concerned, the digital service provider shall be in a position to identify whether the incident affects the provision of its services in specific Member States.
Kar zadeva geografsko razširjenost območja, na katerega vpliva incident iz člena 16(4)(c) Direktive (EU) 2016/1148, je ponudnik digitalnih storitev sposoben ugotoviti, ali incident vpliva na zagotavljanje njegovih storitev v določenih državah članicah.
The extent of disruption of the functioning of the service referred to in point (d) of Article 16(4) of Directive (EU) 2016/1148 shall be measured as regards one or more of the following characteristics impaired by an incident: the availability, authenticity, integrity or confidentiality of data or related services.
Obseg, v katerem je moteno delovanje storitve iz člena 16(4)(d) Direktive (EU) 2016/1148, se izmeri glede na eno ali več od naslednjih značilnosti, oslabljenih zaradi incidenta: razpoložljivost, avtentičnost, celovitost ali zaupnost podatkov ali povezanih storitev.
With regard to the extent of the impact on economic and societal activities referred to in point (e) of Article 16(4) of Directive (EU) 2016/1148, the digital service provider shall be able to conclude, based on indications such as the nature of his contractual relations with the customer or, where appropriate, the potential number of affected users, whether the incident has caused significant material or non-material losses for the users such as in relation to health, safety or damage to property.
Kar zadeva obseg vpliva na gospodarske in družbene dejavnosti iz člena 16(4)(e) Direktive (EU) 2016/1148, je ponudnik digitalnih storitev zmožen, da na podlagi kazalnikov, kot je narava njegovih pogodbenih razmerij s stranko ali, kjer je to primerno, morebitno število prizadetih uporabnikov, ugotovi, ali je incident uporabnikom povzročil veliko materialno ali nematerialno škodo, na primer v zvezi z zdravjem, varnostjo ali škodo na premoženju.
For the purpose of paragraph 1, 2, 3, 4 and 5, the digital service providers shall not be required to collect additional information to which they do not have access.
Za namene odstavkov 1, 2, 3, 4 in 5 se od ponudnikov digitalnih storitev ne bi smelo zahtevati, da zbirajo dodatne informacije, do katerih nimajo dostopa.
Substantial impact of an incident
Pomemben vpliv incidenta