(6)Notwithstanding Article 21 of Directive (EU) 2022/2555 of the European Parliament and of the Councilnote, Article 24(2) of Regulation (EU) No 910/2014 provides for additional requirements as regards to the risk management procedures concerning legal, business, operational and other direct or indirect risks to the provision of the qualified trust service, which are not addressed by Commission Implementing Regulation (EU) 2024/2690note. To ensure that qualified trust service providers structurally and systematically evaluate and document these risks to the reliability of their qualified trust services, they should implement a risk management framework tailored to the qualified trust services they provide. To ensure consistency of risk management policies implemented by non-qualified trust service providers and qualified trust service providers, that framework should comply with the requirements set out in Commission Implementing Regulation (EU) 2025/2160note.
Source: EUR-Lex, © European Union, 1998-2026. Reuse authorised under Decision 2011/833/EU.