Title II, Chapter III, Article 22, Point (d) · Commission Delegated Regulation (EU) 2024/1774

Contents

(a) document the ICT-related incident management process refer…
(b) establish a list of relevant contacts with internal functi…
(c) establish, implement, and operate technical, organisationa…
(d) retain all evidence relating to ICT-related incidents for…1 change
(e) establish and implement mechanisms to analyse significant…

(d)retain all evidence relating to ICT-related incidents for a period that shall be no longer than necessary for the purposes for which the data are collected, commensurate with the criticality of the affected business functions, supporting processes, and ICT and information assets, in accordance with Article 8(2) of Commission Delegated Regulation (EU) 2024/1772^note and with any applicable retention requirement pursuant to Union law;