2. When conducting the assessment referred to in paragraph 1, the competent authority shall take into account all of the following:
|
(a)
|
the adequacy and the coherence of the corrective and remedial measures implemented by the financial entities to mitigate the risks identified in the recommendations;
|
|
(b)
|
the assessment made by the Lead Overseer of the compliance of the critical ICT third-party service provider with the measures and actions included in the report where it has impacts on the exposure of the financial entities under its remit to the risks identified in the recommendations;
|
|
(c)
|
the view of any other competent authorities who have been consulted in accordance with Article 42(5) of Regulation (EU) 2022/2554;
|
|
(d)
|
whether the Lead Overseer has considered the actions and remedies implemented by the critical ICT third-party service provider as adequate to mitigate the exposure of the financial entities under its remit to the risks identified in the recommendations.
|