Licensees must conduct regular testing of resilience of its IT systems to meet its business requirements.