Άρθρο 4 Κύριες φάσεις του κύκλου ζωής για την έγκριση και τη χρήση των συμβατικών ρυθμίσεων

the responsibilities of the management body, including its involvement, as appropriate, in the decision-making process on the use of ICT services supporting critical or important functions provided by ICT third-party service providers;

the planning of contractual arrangements, including the risk assessment, the due diligence as set out in Articles 5 and 6 and the approval process regarding new or material changes to contractual arrangements as set out in Article 8(4);

the involvement of business units, internal controls and other relevant units in respect of contractual arrangements;

the implementation, monitoring and management of contractual arrangements as referred to in Articles 7, 8 and 9, including at consolidated and sub-consolidated level, where applicable;

the documentation and record-keeping, taking into account the requirements with regard to the register of information laid down in Article 28(3) of Regulation (EU) 2022/2554;

the exit strategies and termination processes as set out in Article 10.