In this act Article 35 of 42
Article 35 — Data, system and network security
Financial servicesLevel 2RTSDORAIn forceOfficial source
The financial entities referred to in Article 16(1) of Regulation (EU) 2022/2554 shall, as part of their systems, protocols, and tools, develop and implement safeguards that ensure the security of networks against intrusions and data misuse and that preserve the availability, authenticity, integrity, and confidentiality of data. In particular, financial entities shall, taking into account the classification referred to in Article 30(1) of this Regulation, establish all of the following:
35(a)
a)the identification and implementation of measures to protect data in use, in transit, and at rest;
Copy link35(b)
b)the identification and implementation of security measures regarding the use of software, data storage media, systems and endpoint devices that transfer and store data of the financial entity;
Copy link35(c)
c)the identification and implementation of measures to prevent and detect unauthorised connections to the financial entity’s network, and to secure the network traffic between the financial entity’s internal networks and the internet and other external connections;
Copy link35(d)
d)the identification and implementation of measures that ensure the availability, authenticity, integrity, and confidentiality of data during network transmissions;
Copy link35(e)
e)a process to securely delete data on premises, or that are stored externally, that the financial entity no longer needs to collect or store;
Copy link