28. In addition to paragraph 27, financial entities within a group for which no waivers have been …

In addition to paragraph 27, financial entities within a group for which no waivers have been granted on the basis of Article 109 of Directive 2013/36/EU and Article 7 of Regulation (EU) No 575/2013, institutions that are a central body or that are permanently affiliated to a central body for which no waivers have been granted on the basis of Article 21 of Directive 2013/36/EU, or institutions that are members of an institutional protection scheme should take into account the following:

• a. where the operational monitoring of third-party arrangement is centralised (e.g. as part of a master agreement for the monitoring of third-party arrangements), financial entities should ensure that, at least for services supporting critical or important functions provided by TPSPs, both independent monitoring of the TPSP and appropriate oversight by each financial entity is performed, including by receiving, at least annually and upon request from such centralised function, reports that include, at least, the risk assessment and performance monitoring. In addition, financial entities should receive from the centralised function a summary of the relevant audit reports for services supporting critical or important functions provided by TPSPs and, upon request, the full audit report;
• b. financial entities should ensure that their management body will be duly informed of relevant planned changes regarding TPSPs that are monitored centrally and the potential impact of these changes on the services supporting critical or important functions provided, including a summary of the risk analysis, including legal risks, compliance with regulatory requirements and the impact on service levels, in order for them to assess the impact of these changes;
• c. where those financial entities within the group, institutions affiliated to a central body or institutions that are part of an institutional protection scheme rely on a central pre-contractual analysis of the third-party arrangements, referred to in Section 12, each financial entity should receive a summary of the assessment and ensure that it takes into consideration its specific structure and risks within the decision-making process;
• d. where the register of all existing third-party arrangements, as referred to in Section 10, is established and maintained centrally within the group or the institutional protection scheme (IPS), competent authorities and all financial entities should be able to obtain their individual register without undue delay. This register should include all third-party arrangements, including third-party arrangements with TPSPs within the group or institutional protection scheme;
• e. where those financial entities rely on an exit plan, as referred to in Section 14, for third party arrangement supporting critical or important function that has been established at group level, within the institutional protection scheme or by the central body, all financial entities should receive a summary of the plan and be satisfied that the plan can be effectively executed.

1. Übersicht

1.1 Referenzen

• Artikel 7 Ausnahmen von der Anwendung der Aufsichtsanforderungen auf Einzelbasis

1.2 Identifizierte Anforderungen

1.3 Zugehörige Standards

2. Identifizierte Anforderungen

3. Zugehörige Standards

• EBA - Published by the European Banking Authority at https://www.eba.europa.eu/