OpenLegislation

Division 4.2.2 Organisers shall provide documentation showing that they:

United Kingdom

Original text. Later amendments are not shown.

  1. (a)

    have assessed the risks of the system;

  2. (b)

    have determined appropriate measures to prevent and mitigate the impact of incidents affecting the security of the system;

  3. (c)

    have identified the residual risks;

  4. (d)

    have implemented the measures and verified their implementation;

  5. (e)

    have provided the organisational means to receive information on new threats and security improvements;

  6. (f)

    comply throughout the collection process with the certification requirements laid down in Article 11(4) of Regulation (EU) 2019/788, including having in place the necessary processes to ensure this.