18. In the event that the activity of the institution is in whole or in part outsourced to third …

In the event that the activity of the institution is in whole or in part outsourced to third parties, or carried out by another entity in other ways, institutions should ensure that, in doing so, they comply with the requirements established in the CEBS Guidelines on outsourcing¹⁷ . This includes, in particular, CEBS guideline 2, which provides that ‘the ultimate responsibility for the proper management of the risks associated with outsourcing or the outsourced activities lies with an outsourcing institution’s senior management’.

¹⁷ CEBS, Guidelines on outsourcing (2006).

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Standards

2. Identified Requirements

3. Related Standards

• EBA - Published by the European Banking Authority at https://www.eba.europa.eu/