Art. 15

(Art. 14 FinMIA)

1. The IT systems must be set up in such a way that:
   1. the requirements of information availability, integrity and confidentiality can be appropriately fulfilled with respect to the business activity in question;
   2. reliable access control is possible;
   3. arrangements are in place for identifying security deficiencies and being able to respond to them appropriately.
2. The financial market infrastructure shall take appropriate measures to ensure that business-relevant data can be recovered in the event of loss.