+Article 23 5.

Article 23 5.

Financial entities shall consider all of the following criteria to trigger the ICT-related incident detection and response processes referred to in Article 10(2) of Regulation (EU) 2022/2554:

(a) 

indications that malicious activity may have been carried out in an ICT system or network, or that such ICT system or network may have been compromised;

(b) 

data losses detected in relation to the availability, authenticity, integrity, and confidentiality of data;

(c) 

adverse impact detected on financial entity’s transactions and operations;

(d) 

ICT systems’ and network unavailability.

1. Prezentare generală

,

1.1 Referințe

1.2 Cerințe identificate

1.3 Standarde asociate

2. Cerințe identificate

Cerințe

3. Standarde asociate

Standarde