+Section II
---+Article 6 ICT risk management framework
------+Article 6 1
------+Article 6 2
------+Article 6 3
------+Article 6 4
------+Article 6 5
------+Article 6 6
------+Article 6 7
------+Article 6 8
------+Article 6 9
------+Article 6 10
---+Article 7 ICT systems, protocols and tools
------+Article 7 (a)
------+Article 7 (b)
------+Article 7 (c)
------+Article 7 (d)
---+Article 8 Identification
------+Article 8 1
------+Article 8 2
------+Article 8 3
------+Article 8 4
------+Article 8 5
------+Article 8 6
------+Article 8 7
---+Article 9 Protection and prevention
------+Article 9 1
------+Article 9 2
------+Article 9 3
------+Article 9 4
---+Article 10 Detection
------+Article 10 1
------+Article 10 2
------+Article 10 3
------+Article 10 4
---+Article 11 Response and recovery
------+Article 11 1
------+Article 11 2
------+Article 11 3
------+Article 11 4
------+Article 11 5
------+Article 11 6
------+Article 11 7
------+Article 11 8
------+Article 11 9
------+Article 11 10
------+Article 11 11
---+Article 12 Backup policies and procedures, restoration and recovery procedures and methods
------+Article 12 1
------+Article 12 2
------+Article 12 3
------+Article 12 4
------+Article 12 5
------+Article 12 6
------+Article 12 7
---+Article 13 Learning and evolving
------+Article 13 1
------+Article 13 2
------+Article 13 3
------+Article 13 4
------+Article 13 5
------+Article 13 6
------+Article 13 7
---+Article 14 Communication
------+Article 14 1
------+Article 14 2
------+Article 14 3
---+Article 15 Further harmonisation of ICT risk management tools, methods, processes and policies
------+Article 15 (a)
------+Article 15 (b)
------+Article 15 (c)
------+Article 15 (d)
------+Article 15 (e)
------+Article 15 (f)
------+Article 15 (g)
------+Article 15 2
------+Article 15 3
------+Article 15 4
---+Article 16 Simplified ICT risk management framework
------+Article 16 1
------+Article 16 2
------+Article 16 3

Section II

Section II

1. Overview

,
Article 6 ICT risk management framework -
Article 7 ICT systems, protocols and tools

In order to address and manage ICT risk, financial entities shall use and maintain updated ICT systems, protocols and tools that are:
Article 8 Identification -
Article 9 Protection and prevention -
Article 10 Detection -
Article 11 Response and recovery -
Article 12 Backup policies and procedures, restoration and recovery procedures and methods -
Article 13 Learning and evolving -
Article 14 Communication -
Article 15 Further harmonisation of ICT risk management tools, methods, processes and policies

The ESAs shall, through the Joint Committee, in consultation with the European Union Agency on Cybersecurity (ENISA), develop common draft regulatory technical standards in order to:
Article 16 Simplified ICT risk management framework -

1.1 References

1.2 Identified Requirements

1.3 Related Standards

2. Identified Requirements

Requirements

3. Related Standards

Standards