It is necessary to lay down requirements for operational risk, and more particularly requirements for ICT project and change management and ICT business continuity management building on those that apply already to central counterparties, central securities depositories and trading venues under, respectively, Regulations (EU) No 648/2012 3, (EU) No 600/2014 4 and (EU) No 909/2014 5 of the European Parliament and of the Council.
recital