+Article 6 Criticality of services affected
---+Article 6 (a)
---+Article 6 (b)
---+Article 6 (c)

Article 6 Criticality of services affected

For the purpose of determining the criticality of the services affected as referred to in Article 18(1), point (e), of Regulation (EU) 2022/2554, financial entities shall assess whether the incident:

1. Overview

,
Article 6 (a)

affects or has affected ICT services or network and information systems that support critical or important functions of the financial entity;
Article 6 (b)

affects or has affected financial services provided by the financial entity that require authorisation, registration or that are supervised by competent authorities;
Article 6 (c)

constitutes or has constituted a successful, malicious and unauthorised access to the network and information systems of the financial entity.

1.1 References

1.2 Identified Requirements

1.3 Related Standards

2. Identified Requirements

Requirements

3. Related Standards

Standards