Info

🔗 Back to Summary. 🇫🇷 French Version: 2025R0299_FR.3. Back to Summary of LVL1. Open the PDF. Direct link to EUR-LEX.

Article 2 – Business continuity organisational arrangements ⬅️ | ➡️ Article 4 – Business continuity plans

Article 3 - Business continuity policy

1.

The business continuity policy referred to in 2023 shall ensure that crypto-asset service providers properly address disruptive incidents or performance issues relating to the systems critical to the operation of their business functions and it shall be laid down in a durable medium.

2.

Crypto-asset service providers shall include in the business continuity policy all of the following:

(a)

a specification of the scope of the business continuity policy, including its limitations and exclusions, to be covered by the business continuity plans, procedures, and measures;

(b)

a description of the criteria to activate the business continuity plans, including escalation procedures up to the level of the management body;

(c)

provisions on the governance and organisation of the crypto-asset service provider, including, the roles and responsibilities of the staff, ensuring that sufficient resources are available for the effective implementation of the policy;

(d)

provisions that ensure consistency between the business continuity plans and the ICT-business continuity plans, and ICT response and recovery plans referred to in Articles 24 and 26 of Delegated Regulation (EU) 2024/1774.