--- title: "Article 83 — IT security" type: regulation legal_status: in_force source: "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02024R1620-20251110" source_retrieved: 2026-10-08 shortTitle: "Article 83 — IT security" instrument_type: level1_regulation authority: Commission binding: true binding_character: binding mica_level2: false legal_basis: "Regulation (EU) 2024/1620" instrument: amla celex: "32024R1620" regulation: AMLA regulation-full: "Regulation (EU) 2024/1620" article: 83 status: in_force object_id: eu.amla.legal_text.article.83 text_version: "Consolidated version of 10 November 2025" source_url: "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02024R1620-20251110" check_status: matched verified: true last_checked: 2026-11-09 --- *In force · Consolidated version of 10 November 2025 · Verified 9 Nov 2026 · [Official source](https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02024R1620-20251110)* 1. The Authority shall establish an internal IT governance at the level of the Executive Director which establishes and manages the IT budget and ensures regular reporting to the Executive Board on compliance with applicable IT security rules and standards. 2. The Authority shall ensure that a sufficient share of its IT expenditure is transparently allocated to direct IT security. The contribution to the Cybersecurity Service for the Union institutions, bodies, offices and agencies (CERT-EU) may be counted in that share. 3. An adequate IT security monitoring, detection and response service shall be established, using the services of CERT-EU. Major incidents shall be reported to CERT-EU and to the Commission within 24 hours of detection. *** [Chapter IV — Financial provisions](../chapters/iv.md) · [← Article 82](82.md) · [Article 84 →](84.md)