Info
🔗 Back to Summary. 🇫🇷 French Version: 2024R1774_FR.5. Back to Summary of LVL1. Open the PDF. Direct link to EUR-LEX.
Article 4 – ICT asset management policy ⬅️ | ➡️ Article 6 – Encryption and cryptographic controls
Références LVL1 <=> LVL2
Level 1 reference(s): 2022R2554_EN.15
Article 5 - ICT asset management procedure
1.
Financial entities shall develop, document, and implement a procedure for the management of ICT assets.
2.
The procedure for management of ICT assets referred to in paragraph 1 shall specify the criteria to perform the criticality assessment of information assets and ICT assets supporting business functions. That assessment shall take into account:
(a)
the ICT risk related to those business functions and their dependencies on the information assets or ICT assets;
(b)
how the loss of confidentiality, integrity, and availability of such information assets and ICT assets would impact the business processes and activities of the financial entities.