> For the complete documentation index, see [llms.txt](https://www.headlesslaw.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://www.headlesslaw.com/amla/articles/83.md).

# Article 83 — IT security

*In force · Consolidated version of 10 November 2025 · Checked against EUR-Lex on 8 Oct 2026 ·* [*Official source*](https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02024R1620-20251110)

1. The Authority shall establish an internal IT governance at the level of the Executive Director which establishes and manages the IT budget and ensures regular reporting to the Executive Board on compliance with applicable IT security rules and standards.
2. The Authority shall ensure that a sufficient share of its IT expenditure is transparently allocated to direct IT security. The contribution to the Cybersecurity Service for the Union institutions, bodies, offices and agencies (CERT-EU) may be counted in that share.
3. An adequate IT security monitoring, detection and response service shall be established, using the services of CERT-EU. Major incidents shall be reported to CERT-EU and to the Commission within 24 hours of detection.

***

[Chapter IV — Financial provisions](/amla/chapters/iv.md) · [← Article 82](/amla/articles/82.md) · [Article 84 →](/amla/articles/84.md)