+62. For third-party arrangements supporting critical or important functions, the register should …

62. For third-party arrangements supporting critical or important functions, the register should …

For third-party arrangements supporting critical or important functions, the register should include at least the following additional information:

  • a. the governing law of the third-party arrangement;
  • b. the dates of the most recent audits;
  • c. where applicable, the names of any subcontractors to which material parts of a critical or important function are subcontracted, including the country where the subcontractors are registered, an identifier (LEI, EUID, or legal persons or other alternative identifiers), the type of functions or material part subcontracted, the rank in the chain, the location from where the non-ICT related service is performed;
  • d. the outcome and date of the last assessment performed of the TPSP ’s substitutability (as easy, medium, highly complex, or impossible to substitute);
  • e. the summary and date of the last assessment performed of the possibility of reintegrating a critical or important function into the financial entity or the impact of discontinuing the critical or important function, together with the recovery time objective of the function and the recovery point objective of the function;
  • f. the existence of an exit plan from the TPSP (‘Yes’ or ‘No’);
  • g. the identification of alternative TPSPs, where possible, in line with paragraph 61 point (g);
  • h. the estimated annual budget cost of the third-party arrangement for the past year, together with the currency.

1. Преглед

,
Наименование Регулация

1.1 Препратки

1.2 Идентифицирани изисквания

1.3 Свързани стандарти

2. Идентифицирани изисквания

Изисквания
Източник Изискване

3. Свързани стандарти

Стандарти
Източник Изискване
  • EBA - Published by the European Banking Authority at https://www.eba.europa.eu/