4.1.1. For the purpose of Article 21(2), point (c) of Directive (EU) 2022/2555, the relevant entities shall lay down and maintain a business continuity and disaster recovery plan to apply in the case of incidents. 4.1.2. The relevant entities’ operations shall be restored according to the business continuity and disaster recovery plan. The plan shall
4.2.1. The relevant entities shall maintain backup copies of information and provide sufficient available resources, including facilities, network and information systems and staff. 4.2.2. Based on the results of the risk assessment and the business continuity plan, the relevant entities shall lay down backup plans which include the following: (a) recovery times; (b) assurance that
4.3.1. The relevant entities shall put in place processes for crisis management. 4.3.2. The relevant entities shall ensure that crisis management processes address at least the following elements: (a) roles and responsibilities for personnel, ensuring that all staff know their roles in crisis situations, including specific steps to follow; (b) appropriate communication means between the