5.1.7. For the purpose of point 5.1.6, the relevant entities shall: (a) regularly monitor reports …

(a)

regularly monitor reports on the implementation of the service level agreements, where applicable;

(b)

review incidents related to ICT products and ICT services from suppliers and service providers;

(c)

assess the need for unscheduled reviews and document the findings in a comprehensible manner;

(d)

analyse the risks presented by changes related to ICT products and ICT services from suppliers and service providers and, where appropriate, take mitigating measures in a timely manner.