Organizational security
▪ strong two-factor authentication
▪ electronic signature
▪ safe storage of cryptographic keys
▪ storage of third-party certificates
▪ setting specific security policies
▪ the card/token is a certified qualified means (QSCD)
▪ qualified electronic signature according to eIDAS
▪ qualified electronic seal according to eIDAS
and more
Source: it.portal