Identification, documentation and evaluation of risks
Article 3
Non-qualified trust service providers shall identify, document and evaluate all risks referred to in Article 19a(1) of Regulation (EU) No 910/2014 in accordance with the risk management policies referred to in Article 2, and shall in particular:
(a)
identify risks in relation to third parties;
(b)
identify potential single point of failure in the provision of the trust services;
(c)
evaluate the identified risks based on the risk criteria referred to in Article 2(2), point (b).
Compiled from an official source version. Later amendments or repeals may not be reflected; the official text prevails. · Read the official text ↗ · Data as of 2026-07-04
CitationArticle 3 of Commission Implementing Regulation (EU) 2025/2160 (LawPlayer, data as of 2026-07-04)
