In this act Article 14 of 42
Article 14 — Securing information in transit
Financial servicesLevel 2RTSDORAIn forceOfficial source
14(1)Copy link
1.As part of the safeguards to preserve the availability, authenticity, integrity and confidentiality of data, financial entities shall develop, document, and implement the policies, procedures, protocols, and tools to protect information in transit. Financial entities shall in particular ensure all of the following:
14(1)(a)
a)the availability, authenticity, integrity and confidentiality of data during network transmission, and the establishment of procedures to assess compliance with those requirements;
Copy link14(1)(b)
b)the prevention and detection of data leakages and the secure transfer of information between the financial entity and external parties;
Copy link14(1)(c)
c)that requirements on confidentiality or non-disclosure arrangements reflecting the financial entity’s needs for the protection of information for both the staff of the financial entity and of third parties are implemented, documented, and regularly reviewed.\
Copy link14(2)Copy link
2.Financial entities shall design the policies, procedures, protocols, and tools to protect the information in transit referred to in paragraph 1 on the basis of the results of the approved data classification and of the ICT risk assessment.
Section 7 — ICT project and change management