Regulation (EU) No 600/2014 is amended as follows:
Article 27g is amended as follows:
paragraph 4 is replaced by the following:
An APA shall comply with the requirements concerning the security of network and information systems set out in Regulation (EU) 2022/2554 of the European Parliament and of the Council (^{14}).
in paragraph 8, point (c) is replaced by the following:
the concrete organisational requirements laid down in paragraphs 3 and 5.’;
Article 27h is amended as follows:
paragraph 5 is replaced by the following:
‘5. A CTP shall comply with the requirements concerning the security of network and information systems set out in Regulation (EU) 2022/2554.’.
in paragraph 8, point (e) is replaced by the following:
the concrete organisational requirements laid down in paragraph 4.’;
Article 27i is amended as follows:
paragraph 3 is replaced by the following:
‘3. An ARM shall comply with the requirements concerning the security of network and information systems set out in Regulation (EU) 2022/2554.’;
in paragraph 5, point (b) is replaced by the following:
the concrete organisational requirements laid down in paragraphs 2 and 4.’.