2. Member States shall ensure that the competent authorities have the powers and means to require, where necessary for the performance of their tasks under this Directive, that the entities under Directive (EU) 2022/2555 that Member States have identified as critical entities under this Directive provide, within a reasonable time limit set by those authorities:
|
(a)
|
the information necessary to assess whether the measures taken by those entities to ensure their resilience meet the requirements set out in Article 13;
|
|
(b)
|
evidence of the effective implementation of those measures, including the results of an audit conducted by an independent and qualified auditor selected by that entity and conducted at its expense.
|
When requiring that information, the competent authorities shall state the purpose of the requirement and specify the information required.