# Article 3 — Business continuity policy **Commission Delegated Regulation (EU) 2025/299 · binding · OJ L, 2025/299, 13.2.2025 · dated 31 Oct 2024 [in force]** *In force · Commission Delegated Regulation (EU) 2025/299, OJ L, 2025/299, 13.2.2025 · Checked against EUR-Lex on 26 Oct 2026 · [Official source](https://eur-lex.europa.eu/eli/reg_del/2025/299/oj/eng)* 1. The business continuity policy referred to in [Article 68(7)](../../articles/68.md) of Regulation (EU) 2023/1114 shall ensure that crypto-asset service providers properly address disruptive incidents or performance issues relating to the systems critical to the operation of their business functions and it shall be laid down in a durable medium. 2. Crypto-asset service providers shall include in the business continuity policy all of the following:\ a) a specification of the scope of the business continuity policy, including its limitations and exclusions, to be covered by the business continuity plans, procedures, and measures;\ b) a description of the criteria to activate the business continuity plans, including escalation procedures up to the level of the [management body](https://www.headlesslaw.com/definitions/mica/management-body);\ c) provisions on the governance and organisation of the crypto-asset service provider, including, the roles and responsibilities of the staff, ensuring that sufficient resources are available for the effective implementation of the policy;\ d) provisions that ensure consistency between the business continuity plans and the ICT-business continuity plans, and ICT response and recovery plans referred to in Articles 24 and 26 of Delegated Regulation (EU) 2024/1774.