Article 20(1) Management body approval and oversight
The management body's duty to approve the entity's cybersecurity risk-management measures and oversee their implementation, and how Implementing Regulation 2024/2690 turns this into policy approval, reporting lines and risk acceptance.

