Information assurance and security standards
Article 10
1. Node operators of nodes providing authentication shall prove that, in respect of the nodes participating in the interoperability framework, the node fulfils the requirements of standard ISO/IEC 27001 by certification, or by equivalent methods of assessment, or by complying with national legislation. 2. Node operators shall deploy security critical updates without undue delay.