Source: OJ L, 2024/2690, 18.10.2024
EN- High common level of cybersecurity for entities
Implementing acts
- Cybersecurity measures and significant incidents for relevant entities
Article 14 Significant incidents with regard to trust service providers
With regard to trust service providers means a trust service provider as defined in Article 3, point (19), of Regulation (EU) No 910/2014;, an incident means an incident as defined in Article 6, point (6), of Directive (EU) 2022/2555; shall be considered significant under Article 3(1)(g) where it fulfils one or more of the following criteria:
a trust service means a trust service as defined in Article 3, point (16), of Regulation (EU) No 910/2014; is completely unavailable for more than 20 minutes;
a trust service means a trust service as defined in Article 3, point (16), of Regulation (EU) No 910/2014; is unavailable to users, or relying parties, for more than one hour calculated on a calendar week basis;
more than 1 % of the users or relying parties in the Union, or more than 200000 users or relying parties in the Union, whichever number is smaller, are impacted by limited availability of a trust service means a trust service as defined in Article 3, point (16), of Regulation (EU) No 910/2014;;
physical access to an area where network and information systems means: an electronic communications network as defined in Article 2, point (1), of Directive (EU) 2018/1972; any device or group of interconnected or related devices, one or more of which, pursuant to a programme, carry out automatic processing of digital data; or digital data stored, processed, retrieved or transmitted by elements covered under points (a) and (b) for the purposes of their operation, use, protection and maintenance; are located and to which access is restricted to trusted personnel of the trust service provider means a trust service provider as defined in Article 3, point (19), of Regulation (EU) No 910/2014;, or the protection of such physical access, is compromised;
the integrity, confidentiality or authenticity of stored, transmitted or processed data related to the provision of a trust service means a trust service as defined in Article 3, point (16), of Regulation (EU) No 910/2014; is compromised with an impact on more than 0,1 % of users or relying parties, or more than 100 of users or relying parties, whichever number is smaller, of the trust service means a trust service as defined in Article 3, point (16), of Regulation (EU) No 910/2014; in the Union.
Springlex and this text is meant purely as a documentation tool and has no legal effect. No liability is assumed for its content. The authentic version of this act is the one published in the Official Journal of the European Union.