Article 14 Significant incidents with regard to trust service providers


With regard to trust service providers means a trust service provider as defined in Article 3, point (19), of Regulation (EU) No 910/2014;, an incident means an incident as defined in Article 6, point (6), of Directive (EU) 2022/2555; shall be considered significant under Article 3(1)(g) where it fulfils one or more of the following criteria:

  1. a trust service means a trust service as defined in Article 3, point (16), of Regulation (EU) No 910/2014; is completely unavailable for more than 20 minutes;

  2. a trust service means a trust service as defined in Article 3, point (16), of Regulation (EU) No 910/2014; is unavailable to users, or relying parties, for more than one hour calculated on a calendar week basis;

  3. more than 1 % of the users or relying parties in the Union, or more than 200000 users or relying parties in the Union, whichever number is smaller, are impacted by limited availability of a trust service means a trust service as defined in Article 3, point (16), of Regulation (EU) No 910/2014;;

  4. physical access to an area where network and information systems means: an electronic communications network as defined in Article 2, point (1), of Directive (EU) 2018/1972; any device or group of interconnected or related devices, one or more of which, pursuant to a programme, carry out automatic processing of digital data; or digital data stored, processed, retrieved or transmitted by elements covered under points (a) and (b) for the purposes of their operation, use, protection and maintenance; are located and to which access is restricted to trusted personnel of the trust service provider means a trust service provider as defined in Article 3, point (19), of Regulation (EU) No 910/2014;, or the protection of such physical access, is compromised;

  5. the integrity, confidentiality or authenticity of stored, transmitted or processed data related to the provision of a trust service means a trust service as defined in Article 3, point (16), of Regulation (EU) No 910/2014; is compromised with an impact on more than 0,1 % of users or relying parties, or more than 100 of users or relying parties, whichever number is smaller, of the trust service means a trust service as defined in Article 3, point (16), of Regulation (EU) No 910/2014; in the Union.

We're continuously improving our platform to serve you better.

Your feedback matters! Let us know how we can improve.

Found a bug?

Springflod is a Swedish boutique consultancy firm specialising in cyber security within the financial services sector.

We offer professional services concerning information security governance, risk and compliance.

Crafted with ❤️ by Springflod