+CHAPTER V Managing of ICT third-party risk
---+Section I Key principles for a sound management of ICT third-party risk
------+Article 28 General principles
---------+Article 28 1
---------+Article 28 2
---------+Article 28 3
---------+Article 28 4
---------+Article 28 5
---------+Article 28 6
---------+Article 28 7
---------+Article 28 8
---------+Article 28 9
---------+Article 28 10
------+Article 29 Preliminary assessment of ICT concentration risk at entity level
---------+Article 29 1
---------+Article 29 2
------+Article 30 Key contractual provisions
---------+Article 30 1
---------+Article 30 2
---------+Article 30 3
---------+Article 30 4
---------+Article 30 5
------+Section II Oversight Framework of critical ICT third-party service providers
---------+Article 31 Designation of critical ICT third-party service providers
------------+Article 31 1
------------+Article 31 2
------------+Article 31 3
------------+Article 31 4
------------+Article 31 5
------------+Article 31 6
------------+Article 31 7
------------+Article 31 8
------------+Article 31 9
------------+Article 31 10
------------+Article 31 11
------------+Article 31 12
------------+Article 31 13
---------+Article 32 Structure of the Oversight Framework
------------+Article 32 1
------------+Article 32 2
------------+Article 32 3
------------+Article 32 4
------------+Article 32 5
------------+Article 32 6
------------+Article 32 7
------------+Article 32 8
------------+Article 32 9
---------+Article 33 Tasks of the Lead Overseer
------------+Article 33 1
------------+Article 33 2
------------+Article 33 3
------------+Article 33 4
------------+Article 33 5
---------+Article 34 Operational coordination between Lead Overseers
------------+Article 34 1
------------+Article 34 2
------------+Article 34 3
---------+Article 35 Powers of the Lead Overseer
------------+Article 35 1
------------+Article 35 2
------------+Article 35 3
------------+Article 35 4
------------+Article 35 5
------------+Article 35 6
------------+Article 35 7
------------+Article 35 8
------------+Article 35 9
------------+Article 35 10
------------+Article 35 11
---------+Article 36 Exercise of the powers of the Lead Overseer outside the Union
------------+Article 36 1
------------+Article 36 2
------------+Article 36 3
---------+Article 37 Request for information
------------+Article 37 1
------------+Article 37 2
------------+Article 37 3
------------+Article 37 4
------------+Article 37 5
---------+Article 38 General investigations
------------+Article 38 1
------------+Article 38 2
------------+Article 38 3
------------+Article 38 4
------------+Article 38 5
---------+Article 39 Inspections
------------+Article 39 1
------------+Article 39 2
------------+Article 39 3
------------+Article 39 4
------------+Article 39 5
------------+Article 39 6
------------+Article 39 7
---------+Article 40 Ongoing oversight
------------+Article 40 1
------------+Article 40 2
------------+Article 40 3
------------+Article 40 4
---------+Article 41 Harmonisation of conditions enabling the conduct of the oversight activities
------------+Article 41 1
------------+Article 41 2
---------+Article 42 Follow-up by competent authorities
------------+Article 42 1
------------+Article 42 2
------------+Article 42 3
------------+Article 42 4
------------+Article 42 5
------------+Article 42 6
------------+Article 42 7
------------+Article 42 8
------------+Article 42 9
------------+Article 42 10
------------+Article 42 11
---------+Article 43 Oversight fees
------------+Article 43 1
------------+Article 43 2
---------+Article 44 International cooperation
------------+Article 44 1
------------+Article 44 2

CHAPTER V Managing of ICT third-party risk

CHAPTER V Managing of ICT third-party risk

1. Overview

,
Section I Key principles for a sound management of ICT third-party risk Section I Key principles for a sound management of ICT third-party risk
Section II Oversight Framework of critical ICT third-party service providers Section II Oversight Framework of critical ICT third-party service providers

1.1 References

1.2 Identified Requirements

1.3 Related Standards

2. Identified Requirements

Requirements

3. Related Standards

Standards
  • Builddate: 27.12.2022 00:00:00 -Doknr: CELEX:32022R2554
  • EULAW -

    EN: Legal acts of the European Union from EUR-Lex, https://eur-lex.europa.eu/. © European Union. Re-use is authorised by Decision 2011/833/EU, provided the source is acknowledged; the consolidated texts are licensed under CC BY 4.0 (EUR-Lex legal notice). Divided into sections and converted into the GRCA format, the wording unchanged. Only the legislation published in the Official Journal of the European Union is deemed authentic.

    DE: Rechtsakte der Europäischen Union aus EUR-Lex, https://eur-lex.europa.eu/. © Europäische Union. Weiterverwendung nach Beschluss 2011/833/EU mit Quellenangabe gestattet; die konsolidierten Fassungen stehen unter CC BY 4.0 (Rechtlicher Hinweis von EUR-Lex). In Abschnitte aufgeteilt und in das GRCA-Format umgewandelt, der Wortlaut unverändert. Verbindlich sind allein die im Amtsblatt der Europäischen Union veröffentlichten Rechtsakte.