DORA, Article 16, EU

1. Articles 5 to 15 of this Regulation shall not apply to small and non-interconnected investment firms, payment institutions exempted pursuant to Directive (EU) 2015/2366; institutions exempted pursuant to Directive 2013/36/EU in respect of which Member States have decided not to apply the option referred to in Article 2(4) of this Regulation; electronic money institutions exempted pursuant to Directive 2009/110/EC; and small institutions for occupational retirement provision.

Without prejudice to the first subparagraph, the entities listed in the first subparagraph shall:

(a)

put in place and maintain a sound and documented ICT risk management framework that details the mechanisms and measures aimed at a quick, efficient and comprehensive management of ICT risk, including for the protection of relevant physical components and infrastructures;

(b)

continuously monitor the security and functioning of all ICT systems;

(c)

minimise the impact of ICT risk through the use of sound, resilient and updated ICT systems, protocols and tools which are appropriate to support the performance of their activities and the provision of services and adequately protect availability, authenticity, integrity and confidentiality of data in the network and information systems;

(d)

allow sources of ICT risk and anomalies in the network and information systems to be promptly identified and detected and ICT-related incidents to be swiftly handled;

(e)

identify key dependencies on ICT third-party service providers;

(f)

ensure the continuity of critical or important functions, through business continuity plans and response and recovery measures, which include, at least, back-up and restoration measures;

Official source

Version: a230379bbbab8284

SHA-256: sha256:a230379bbbab8284f1d655a9cb50067c74fe1d1143457db147635a4e73fa4ea8

• Article 1
• Article 2
• Article 3
• Article 4
• Article 5
• Article 6
• Article 7
• Article 8
• Article 9
• Article 10
• Article 11
• Article 12
• Article 13
• Article 14
• Article 15
• Article 17
• Article 18
• Article 19
• Article 20
• Article 21
• Article 22
• Article 23
• Article 24
• Article 25
• Article 26
• Article 27
• Article 28
• Article 29
• Article 30
• Article 31
• Article 32
• Article 33
• Article 34
• Article 35
• Article 36
• Article 37
• Article 38
• Article 39
• Article 40
• Article 41
• Article 42
• Article 43
• Article 44
• Article 45
• Article 46
• Article 47
• Article 48
• Article 49
• Article 50
• Article 51
• Article 52
• Article 53
• Article 54
• Article 55
• Article 56
• Article 57
• Article 58
• Article 59
• Article 60
• Article 61
• Article 62
• Article 63
• Article 64

Geographical article agents

Source: NovaCopilot