46. To this end, for the identified material ICT risks, competent authorities should review the …

To this end, for the identified material ICT risks, competent authorities should review the applicable:

• a. ICT risk management policy, processes and risk tolerance thresholds;
• b. Organisational management and oversight framework;
• c. Internal audit coverage and findings; and
• d. ICT risk controls that are specific for the identified material ICT risk.

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Standards

2. Identified Requirements

3. Related Standards

• EBA - Published by the European Banking Authority at https://www.eba.europa.eu/