Article 63 Amendment to Regulation (EU) 2016/1011
TL;DR
The Digital Operations Resilience Act amends Regulation (EU) No 2016/1011 by adding a new paragraph, 6, which requires that administrators of critical benchmarks have sound administrative and accounting procedures, internal control mechanisms, risk assessment procedures, and effective control and safeguard arrangements established to manage ICT systems in accordance with the Regulation (EU) 2022/2554.In Article 6 of Regulation (EU) 2016/1011, the following paragraph is added:
‘6. For critical benchmarks, an administrator shall have sound administrative and accounting procedures, internal control mechanisms, effective procedures for risk assessment, and effective control and safeguard arrangements for managing ICT systems in accordance with Regulation (EU) 2022/2554 of the European Parliament and of the Council (*).
_____________
* Regulation (EU) 2022/2554 of the European Parliament and of the Council of 14 December 2022 on digital operational resiliencemeans the ability of a financial entity to build, assure and review its operational integrity and reliability by ensuring, either directly or indirectly through the use of services provided by ICT third-party service providers, the full range of ICT-related capabilities needed to address the security of the network and information systems which a financial entity uses, and which support the continued provision of financial services and their quality, including throughout disruptions; for the financial sector and amending Regulations (EC) No 1060/2009, (EU) No 648/2012, (EU) No 600/2014, (EU) No 909/2014 and (EU) 2016/1011 (OJ L 333, 27.12.2022, p. 1).’.