In a dynamic environment where ICT risks constantly evolve, it is important that financial entities develop their set of ICT security policies on the basis of leading practices, and where applicable, of standards as defined in Article 2, point (1), of Regulation (EU) No 1025/2012 of the European Parliament and of the Council 2.This should enable financial entities referred to in Title II of this Regulation to remain informed and prepared in a changing landscape.
recital