Bearing in mind that the successful application of adequate security is not a one-off exercise but a continuous process of implementation, review and updating, the providers of electronic communications networks and services should be required to take measures to safeguard their integrity and security in accordance with the assessed risks, taking into account the state of the art of such measures.
Kuna piisava turvalisuse edukas tagamine ei ole ühekordne meede, vaid pidev rakendamise, ülevaatamise ja ajakohastamise protsess, tuleks nõuda, et elektrooniliste sidevõrkude ja -teenuste pakkujad võtaksid meetmeid nende tervikluse ja turvalisuse tagamiseks vastavalt riskihinnangutele, võttes arvesse selliste meetmete arengu taset.