In addition to the obligations set forth in Article (15) above, the Qualified Trust Service Providers shall comply with the following controls and procedures: 

1. Fair, honest and professional business conduct in the course of all their activities and operations.  

2. Appointing personnel with specialized expertise, as per the competence and the required and reliable practical and scientific expertise, from among those who hold adequate certifications and trainings on the rules of information security and personal data protection, and of those who are familiar with the relevant national and international standards.  

3. Securing adequate financial resources for the management and operation of Qualified Trust Services. 

4. Using reliable and secure systems to store, process and protect data in such a manner that such data can be: