ESA's consultation paper on draft RTS to further harmonise ICT Risk Management Tools, methods, processes and policies as mandated under article 15 and 16(3) of regulation (EU) 2022/2554.