+35. Competent authorities should assess whether the institution has properly identified, assessed …

35. Competent authorities should assess whether the institution has properly identified, assessed …

Competent authorities should assess whether the institution has properly identified, assessed and mitigated its ICT risks. This process should be part of the operational risk management framework and congruent to the approach applying to operational risk.

1. Overview

,
Summary Regulation

1.1 References

1.2 Identified Requirements

1.3 Related Standards

2. Identified Requirements

Requirements
Source Requirement

3. Related Standards

Standards
Source Requirement
  • EBA - Published by the European Banking Authority at https://www.eba.europa.eu/