52. For the identified material ICT risks, competent authorities should assess whether the …

For the identified material ICT risks, competent authorities should assess whether the institution has specific controls in place to address these risks. The following sections provide a non-exhaustive list of the specific controls to be considered when assessing the material risks identified under point 3.2.3 that were mapped to the following ICT risk categories:

• a. ICT availability and continuity risks;
• b. ICT security risks;
• c. ICT change risks;
• d. ICT data integrity risks;
• e. ICT outsourcing risks.
• (a) Controls for managing material ICT availability and continuity risks

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Standards

2. Identified Requirements

3. Related Standards

• EBA - Published by the European Banking Authority at https://www.eba.europa.eu/