PSD2, Artikkel 95, EU
1. Member States shall ensure that payment service providers establish a framework with appropriate mitigation measures and control mechanisms to manage the operational and security risks, relating to the payment services they provide. As part of that framework, payment service providers shall establish and maintain effective incident management procedures, including for the detection and classification of major operational and security incidents.
2. Member States shall ensure that payment service providers provide to the competent authority on an annual basis, or at shorter intervals as determined by the competent authority, an updated and comprehensive assessment of the operational and security risks relating to the payment services they provide and on the adequacy of the mitigation measures and control mechanisms implemented in response to those risks.
3. By 13 July 2017, EBA shall, in close cooperation with the ECB and after consulting all relevant stakeholders, including those in the payment services market, reflecting all interests involved, issue guidelines in accordance with Article 16 of Regulation (EU) No 1093/2010 with regard to the establishment, implementation and monitoring of the security measures, including certification processes where relevant.
EBA shall, in close cooperation with the ECB, review the guidelines referred to in the first subparagraph on a regular basis and in any event at least every 2 years.
4. Taking into account experience acquired in the application of the guidelines referred to in paragraph 3, EBA shall, where requested to do so by the Commission as appropriate, develop draft regulatory technical standards on the criteria and on the conditions for establishment, and monitoring, of security measures.
Power is delegated to the Commission to adopt the regulatory technical standards referred to in the first subparagraph in accordance with Articles 10 to 14 of Regulation (EU) No 1093/2010.
5. EBA shall promote cooperation, including the sharing of information, in the area of operational and security risks associated with payment services among the competent authorities, and between the competent authorities and the ECB and, where relevant, the European Union Agency for Network and Information Security.
Versjon: 694a199d5c521101
SHA-256: sha256:694a199d5c52110143acbc078d2a68ff96d440c5443e1d3530490008f74b5664
- Artikkel 1
- Artikkel 2
- Artikkel 3
- Artikkel 4
- Artikkel 5
- Artikkel 6
- Artikkel 7
- Artikkel 8
- Artikkel 9
- Artikkel 10
- Artikkel 11
- Artikkel 12
- Artikkel 13
- Artikkel 14
- Artikkel 15
- Artikkel 16
- Artikkel 17
- Artikkel 18
- Artikkel 19
- Artikkel 20
- Artikkel 21
- Artikkel 22
- Artikkel 23
- Artikkel 24
- Artikkel 25
- Artikkel 26
- Artikkel 27
- Artikkel 28
- Artikkel 29
- Artikkel 30
- Artikkel 31
- Artikkel 32
- Artikkel 33
- Artikkel 34
- Artikkel 35
- Artikkel 36
- Artikkel 37
- Artikkel 38
- Artikkel 39
- Artikkel 40
- Artikkel 41
- Artikkel 42
- Artikkel 43
- Artikkel 44
- Artikkel 45
- Artikkel 46
- Artikkel 47
- Artikkel 48
- Artikkel 49
- Artikkel 50
- Artikkel 51
- Artikkel 52
- Artikkel 53
- Artikkel 54
- Artikkel 55
- Artikkel 56
- Artikkel 57
- Artikkel 58
- Artikkel 59
- Artikkel 60
- Artikkel 61
- Artikkel 62
- Artikkel 63
- Artikkel 64
- Artikkel 65
- Artikkel 66
- Artikkel 67
- Artikkel 68
- Artikkel 69
- Artikkel 70
- Artikkel 71
- Artikkel 72
- Artikkel 73
- Artikkel 74
- Artikkel 75
- Artikkel 76
- Artikkel 77
- Artikkel 78
- Artikkel 79
- Artikkel 80
- Artikkel 81
- Artikkel 82
- Artikkel 83
- Artikkel 84
- Artikkel 85
- Artikkel 86
- Artikkel 87
- Artikkel 88
- Artikkel 89
- Artikkel 90
- Artikkel 91
- Artikkel 92
- Artikkel 93
- Artikkel 94
- Artikkel 96
- Artikkel 97
- Artikkel 98
- Artikkel 99
- Artikkel 100
- Artikkel 101
- Artikkel 102
- Artikkel 103
- Artikkel 104
- Artikkel 105
- Artikkel 106
- Artikkel 107
- Artikkel 108
- Artikkel 109
- Artikkel 110
- Artikkel 111
- Artikkel 112
- Artikkel 113
- Artikkel 114
- Artikkel 115
- Artikkel 116
- Artikkel 117
Source: NovaCopilot