{"release":{"id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","published":"2026-11-01T16:41:30Z","pinned":false},"limits":{"coverage":{"history":"from:2025-11-10","held_since":"2025-11-10","gaps":[],"covered":["AMLA L1"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","release_published":"2026-11-01T16:41:30Z","checked_at":"2026-10-26","checked_against":"EUR-Lex"},"truncation":null,"failures":[],"incomplete":[]},"page":{"path":"/amla/recitals/71","url":"https://www.headlesslaw.com/amla/recitals/71","title":"Recital 71","family":"l1_recital_view","work_id":"amla","view_of":"/amla/recitals","status":"in_force","force_status":"in_force","date_state":"current","requested_date":null,"as_of":"2026-11-02","applies_from":null,"application":null,"version_label":"Regulation (EU) 2024/1620, OJ L, 2024/1620, 19.6.2024","check":{"against":"EUR-Lex","on":"2026-10-26"},"check_result":"matched","official_url":"https://eur-lex.europa.eu/eli/reg/2024/1620/oj/eng","valid_from":"2025-11-10","valid_until":null,"content_id":"914c2ed8f7697825","versions":["2025-11-10"],"version_url":"https://www.headlesslaw.com/amla/recitals/71/versions/2025-11-10","revision_url":"https://www.headlesslaw.com/amla/recitals/71/versions/2025-11-10/rev/914c2ed8f7697825","versions_url":"https://www.headlesslaw.com/amla/recitals/71/versions","relations_url":"https://www.headlesslaw.com/amla/recitals/71/relations","act_url":"https://www.headlesslaw.com/amla/recitals","source_line":null,"attribution":null,"context":{"act":{"work_id":"amla","path":"/amla/recitals","name":"AMLA","number":"Regulation (EU) 2024/1620","celex":"32024R1620","title_official":null,"document_date":null},"position":{"kind":"recital","key":"71","index":71,"articles":89,"annexes":0},"prev":{"path":"/amla/recitals/70","key":"70","title":"Recital 70"},"next":{"path":"/amla/recitals/72","key":"72","title":"Recital 72"},"act_anchor":""}},"provenance":{"official_url":"https://eur-lex.europa.eu/eli/reg/2024/1620/oj/eng","check":{"result":"matched","checked_at":"2026-10-26","against":"EUR-Lex"},"repo_path":"spaces/amla/recitals.md","unit_text_sha256":"26d02afc01db1e119d7df5bf1997271c03caa4d3df882ee607b45fc5e982bb5c","note":"the unit is a byte-exact part of the act page, whose check record covers it"},"unit":{"locator":"amla/recitals/rec/71","kind":"recital","key":"71","heading":"","text":"As stated in the Communication of the Commission of 7 February 2013 entitled ‘Cybersecurity Strategy of the European Union: An Open, Safe and Secure Cyberspace’, it is essential to ensure a high level of cyber resilience in all Union institutions, bodies, offices and agencies due to the increasingly hostile threat environment. The Executive Director should thus ensure appropriate IT risk management, a strong internal IT governance and sufficient IT security funding. As a rule, at least 10 % of the Authority’s IT expenditure should be transparently allocated to direct IT security. The contribution to the Cybersecurity Service for the Union institutions, bodies, offices and agencies (CERT-EU) could be counted in that minimum expenditure requirement. The Authority should work closely with CERT-EU and report major incidents within 24 hours to CERT-EU as well as to the Commission.","marks":[],"text_hash":"26d02afc01db1e119d7df5bf1997271c03caa4d3df882ee607b45fc5e982bb5c","revision":1,"blocks":[{"locator":"amla/recitals/rec/71/block/1","text_hash":"26d02afc01db1e119d7df5bf1997271c03caa4d3df882ee607b45fc5e982bb5c","revision":1}]}}