Skip to the text
In this act Article 5 of 7

Article 5 — Periodic testing of the business continuity plans

Financial servicesLevel 2RTSMiCAIn forceOfficial source

5(1)

1.Crypto-asset service providers shall test the operation of the business continuity plans referred to in Article 4 on the basis of realistic scenarios. Such testing shall verify the capability of the crypto-asset service provider to recover from disruptive incidents and to resume services in accordance with Article 4(2), point (b).

Copy link
5(2)

2.Crypto-asset service providers shall test the business continuity plans annually taking into account:

Copy link
5(2)(a)
a)the results of the tests referred to in paragraph 1;
Copy link
5(2)(b)
b)the most recent threat intelligence;
Copy link
5(2)(c)
c)lessons derived from previous events;
Copy link
5(2)(d)
d)where relevant, any changes in the recovery objectives, including recovery time objectives and recovery point objectives as referred to in Article 4(2), point (b);
Copy link
5(2)(e)
e)changes in the business functions.
Copy link
5(3)

3.Crypto-asset service providers shall document the results of the testing activity in writing, and submit them to their management body and to the operating units involved in the business continuity plans.

Copy link
5(4)

4.Crypto-asset service providers shall ensure that the testing of the business continuity plans does not interfere with normal conduct of their services.

Copy link