Article 63
Amendment to Regulation (EU) 2016/1011
TL;DR
The Digital Operations Resilience Act amends Regulation (EU) No 2016/1011 by adding a new paragraph, 6, which requires that administrators of critical benchmarks have sound administrative and accounting procedures, internal control mechanisms, risk assessment procedures, and effective control and safeguard arrangements established to manage ICT systems in accordance with the Regulation (EU) 2022/2554.In Article 6 of Regulation (EU) 2016/1011, the following paragraph is added:
‘6. For critical benchmarks, an administrator shall have sound administrative and accounting procedures, internal control mechanisms, effective procedures for risk assessment, and effective control and safeguard arrangements for managing ICT systems in accordance with Regulation (EU) 2022/2554 of the European Parliament and of the Council (5)Regulation (EU) No 1094/2010 of the European Parliament and of the Council of 24 November 2010 establishing a European Supervisory Authority (European Insurance and Occupational Pensions Authority), amending Decision No 716/2009/EC and repealing Commission Decision 2009/79/EC (OJ L 331, 15.12.2010, p. 48)..
_____________
(5)Regulation (EU) No 1094/2010 of the European Parliament and of the Council of 24 November 2010 establishing a European Supervisory Authority (European Insurance and Occupational Pensions Authority), amending Decision No 716/2009/EC and repealing Commission Decision 2009/79/EC (OJ L 331, 15.12.2010, p. 48). Regulation (EU) 2022/2554 of the European Parliament and of the Council of 14 December 2022 on digital
operational resilience for the financial sector and amending Regulations (EC) No 1060/2009, (EU) No 648/2012, (EU) No 600/2014, (EU) No 909/2014 and (EU) 2016/1011 (OJ L 333, 27.12.2022, p. 1).’.