1. When establishing the business continuity policy, including the plans, procedures and measures, crypto-asset service providers shall take into account elements of increased complexity or risk, including:
the type and range of crypto-asset services offered;
the extent to which the services of the crypto-asset service provider rely on permissionless distributed ledger;
the potential impact of any disruptions on the continuity of the crypto-asset service provider’s activities and availability of its services.
2. For the purposes of paragraph 1, crypto-asset service providers shall conduct a self-assessment of the scale, the nature, and range of their services annually. Crypto-asset service providers shall base that self-assessment on the criteria set out in the Annex and any other criteria that the crypto-asset service provider considers relevant.