Article 76 Strategy and policy

approved by the management body;

subject to audit reviews that shall be reported to the management body.

identifies all its critical operations and IT systems and provides for a minimum service level to be maintained for those operations;

includes the CSD's strategy and objectives to ensure the continuity of operations and systems referred to in point (a);

takes into account any links and interdependencies to at least:

1. (i)

   users;

2. (ii)

   critical utilities and critical service providers;

3. (iii)

   other CSDs;

4. (iv)

   other market infrastructures;

defines and documents the arrangements to be applied in the event of a business continuity emergency or major disruption of the CSD's operations in order to ensure a minimum service level of critical functions of the CSD;

identifies the maximum acceptable period of time which critical functions and IT systems may be out of use.