The legislation also imposes new obligations on the management bodies of financial entities and on "critical" ICT service providers that support financial entities, subjecting them to direct ...