+Article 23 5.

Article 23 5.

Financial entities shall consider all of the following criteria to trigger the ICT-related incident detection and response processes referred to in Article 10(2) of Regulation (EU) 2022/2554:

(a) 

indications that malicious activity may have been carried out in an ICT system or network, or that such ICT system or network may have been compromised;

(b) 

data losses detected in relation to the availability, authenticity, integrity, and confidentiality of data;

(c) 

adverse impact detected on financial entity’s transactions and operations;

(d) 

ICT systems’ and network unavailability.

1. Overview

,

1.1 References

1.2 Identified Requirements

1.3 Related Standards

2. Identified Requirements

Requirements

3. Related Standards

Standards