Art. 32

The operator shall identify, measure, manage and monitor its operational risk through the use of appropriate procedures and tools, particularly in order to ensure information security and business continuity, taking into account recognised standards.