(6)APAs and ARMs fall under the scope of Regulation (EU) 2022/2554 and are therefore subject to the digital operational resilience requirements included therein. An applicant APA or ARM should therefore demonstrate to ESMA or, where relevant, to the national competent authority, compliance with all applicable obligations under that Regulation. An applicant APA or ARM should demonstrate compliance in particular with the obligations in the areas of information and communication technology (ICT) risk-management, ICT third-party risk management, business continuity and back-up facilities, testing and capacity, security and incident reporting.