Article 27h 3.

A CTP shall have sound security arrangements in place designed to guarantee the security of the means of transfer of data between the data contributors and the CTP and between the CTP and the users and to minimise the risk of data corruption and unauthorised access. The CTP shall maintain adequate resources and have back-up facilities in place to offer and maintain its services at all times.