1. The competent authority shall, at least on an annual basis, review the arrangements, strategies, processes and mechanisms implemented by a CSD with respect to compliance with this Regulation and evaluate the risks to which the CSD is, or might be, exposed or which it creates for the smooth functioning of securities markets.

2. The competent authority shall require the CSD to submit to the competent authority an adequate recovery plan to ensure continuity of its critical operations.

3. The competent authority shall ensure that an adequate resolution plan is established and maintained for each CSD so as to ensure continuity of at least its core functions, having regard to the size, systemic importance, nature, scale and complexity of the activities of the CSD concerned and any relevant resolution plan established in accordance with the Bank Recovery and Resolution (No.2) Order 2014 [S.I. 2014/3348.].

4. The competent authority shall establish the frequency and depth of the review and evaluation referred to in paragraph 1 having regard to the size, systemic importance, nature, scale and complexity of the activities of the CSD concerned. The review and evaluation shall be updated at least on an annual basis.