Article L521-9 of the French Monetary and Financial Code
Payment service providers shall put in place procedures providing for appropriate mitigation measures and control mechanisms to manage the operational and security risks associated with the payment services they provide. An order of the Minister for the Economy and Finance specifies the content of these procedures.