4.1.1 For the purpose of Article 21(2), point (c) of Directive (EU) 2022/2555, the relevant entities …

Requirement

For the purpose of Article 21(2), point (c) of Directive (EU) 2022/2555, the relevant entities shall lay down and maintain a business continuity and disaster recovery plan to apply in the case of incidents.

Guidance

• Take into account industry-recognised standards when developing the business continuity (35) and disaster recovery plan.
• Create a list of natural disasters (e.g. hurricane, fire, flooding) and other occurrences (e.g. human error) that could affect the services together with a list of disaster recovery capabilities (e.g. backups, tests, recovery objectives, etc.).

Examples of evidence

• Business continuity plan.
• Disaster recovery plan.
• Business continuity and disaster recovery plans are in line with documented standards and/or good practices.
• List of natural and/or major disasters that could affect the services and a list of disaster recovery capabilities (either those available internally or provided by third parties).

1. Panoramica

1.1 Riferimenti

1.2 Requisiti identificati

1.3 Regolamentazioni correlate

2. Requisiti identificati

3. Regolamentazioni correlate

Ticket collegati

• ENISA -