Regulatory activity Final and translated into the EU official languages Guidelines on ICT and security risk management