Contents
Article 6Criticality of services affected#
For the purpose of determining the criticality of the services affected as referred to in Article 18(1), point (e), of Regulation (EU) 2022/2554, financial entities shall assess whether the incident:
(a)affects or has affected ICT services or network and information systems that support critical or important functions of the financial entity;
(b)affects or has affected financial services provided by the financial entity that require authorisation, registration or that are supervised by competent authorities;
(c)constitutes or has constituted a successful, malicious and unauthorised access to the network and information systems of the financial entity.
Source: EUR-Lex, © European Union, 1998-2026. Reuse authorised under Decision 2011/833/EU.