Selection Criteria

Take the following into account when selecting and assessing the service provider: audits conducted by the financial entity or on its behalf, third-party certifications, independent audit reports, internal audit function reports, and publicly available information. Confirm adherence to ethical, social, human, and environmental (sustainability) principles, encompassing appropriate working conditions including the prohibition of child labour. Assess if the service provider operates in a third country and evaluate if this practice heightens operational, reputational, or sanctions-related risks. Secure consent from the service provider for effective audit conduct, both onsite and by designated parties, including auditors from the financial entity, external (third-party auditors), and by competent authorities (such as the regulator). Verify if the service provider intends to engage ICT sub-contractors for substantial portions of their services.

1. Преглед

1.1 Препратки

1.2 Идентифицирани изисквания

1.3 Свързани регулации

2. Идентифицирани изисквания

3. Свързани регулации

• NOREA -

  EN: DORA in Control Framework of NOREA, the Dutch professional association of IT auditors, https://www.norea.nl/. © NOREA. Reproduced with the permission of NOREA; converted into the GRCA format. Only the version published by NOREA is authoritative.

  DE: DORA in Control Framework von NOREA, dem niederländischen Berufsverband der IT-Auditoren, https://www.norea.nl/. © NOREA. Wiedergabe mit Genehmigung von NOREA; in das GRCA-Format umgewandelt. Maßgeblich ist allein die von NOREA veröffentlichte Fassung.