art_27__para_2

Regulation (EU) 2022/2554 of the European Parliament and of the Council of 14 December 2022 on digital operational resilience for the financial sector and amending Regulations (EC) No 1060/2009, (EU) No 648/2012, (EU) No 600/2014, (EU) No 909/2014 and (EU) 2016/1011 (Text with EEA relevance) · European Union

2. When using internal testers, financial entities shall ensure that, in addition to the requirements in paragraph 1, the following conditions are met: such use has been approved by the relevant competent authority or by the single public authority designated in accordance with Article 26(9) and (10); the relevant competent authority has verified that the financial entity has sufficient dedicated resources and ensured that conflicts of interest are avoided throughout the design and execution phases of the test; and the threat intelligence provider is external to the financial entity.

← (e) · All articles · (a) →

Source: EUR-Lex (Cellar) · retrieved 2026-10-12 · Text as adopted (Official Journal); later amendments are not incorporated in this text.