+Article 1 1

Article 1 1

1.   In order to achieve a high common level of digital operational resilience, this Regulation lays down uniform requirements concerning the security of network and information systems supporting the business processes of financial entities as follows:

(a)

requirements applicable to financial entities in relation to:

(i)

information and communication technology (ICT) risk management;

(ii)

reporting of major ICT-related incidents and notifying, on a voluntary basis, significant cyber threats to the competent authorities;

(iii)

reporting of major operational or security payment-related incidents to the competent authorities by financial entities referred to in Article 2(1), points (a) to (d);

(iv)

digital operational resilience testing;

(v)

information and intelligence sharing in relation to cyber threats and vulnerabilities;

(vi)

measures for the sound management of ICT third-party risk;

(b)

requirements in relation to the contractual arrangements concluded between ICT third-party service providers and financial entities;

(c)

rules for the establishment and conduct of the Oversight Framework for critical ICT third-party service providers when providing services to financial entities;

(d)

rules on cooperation among competent authorities, and rules on supervision and enforcement by competent authorities in relation to all matters covered by this Regulation.

1. Przegląd

,

1.1 Odwołania

1.2 Zidentyfikowane wymagania

1.3 Powiązane normy

2. Zidentyfikowane wymagania

Wymagania

3. Powiązane normy

Normy