4. Operators of DLT market infrastructures shall ensure that the overall IT and cyber arrangements related to the use of their distributed ledger technology are proportionate to the nature, scale and complexity of their businesses. Those arrangements shall ensure the continuity and continued transparency, availability, reliability and security of their services and activities, including the reliability of smart contracts used on the DLT market infrastructure. Those arrangements shall also ensure the integrity, security and confidentiality of any data stored by those operators, and shall ensure that those data are available and accessible.
Operators of DLT market infrastructures shall have in place specific operational risk management procedures for the risks posed by the use of distributed ledger technology and crypto-assets and for how to address those risks if they materialise.
To assess the reliability of the overall IT and cyber arrangements of a DLT market infrastructure, the competent authority may require an audit of those arrangements. If the competent authority requires an audit, it shall appoint an independent auditor to carry it out. The DLT market infrastructure shall bear the costs of the audit.