Info
🔗 Back to Summary. 🇫🇷 French Version: 2024R1774_FR.30. Back to Summary of LVL1. Open the PDF. Direct link to EUR-LEX.
Article 29 – Information security policy and measures ⬅️ | ➡️ Article 31 – ICT risk management
Références LVL1 <=> LVL2
Level 1 reference(s): 2022R2554_EN.16
Article 30 - Classification of information assets and ICT assets
1.
As part of the simplified ICT risk management framework referred to in Article 16(1), point (a), of Regulation (EU) 2022/2554, the financial entities referred to in paragraph 1 of that Article shall identify, classify, and document all critical or important functions, the information assets and ICT assets supporting them and their interdependencies. Financial entities shall review that identification and classification as needed.
2.
The financial entities referred to in paragraph 1 shall identify all critical or important functions supported by ICT third-party service providers.