183. Competent authorities should assess whether the ICT policy will provide the credit institution …

Competent authorities should assess whether the ICT policy will provide the credit institution with reliable information and communication systems and whether the ICT systems will be able to fully support risk data aggregation capabilities at normal times as well as during times of stress. In particular, competent authorities should assess whether the credit institution will at least be able to:

• (a) generate accurate and reliable risk data;
• (b) capture and aggregate all material risk data across the institution;
• (c) generate aggregate and up-to-date risk data in a timely manner;
• (d) generate aggregate risk data to meet a broad range of on-demand requests from the management body or competent authorities;
• (e) ensure sound, reliable and secure functioning of information and communication systems supporting the targeted activities of institutions.

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Standards

2. Identified Requirements

3. Related Standards

• EBA - Published by the European Banking Authority at https://www.eba.europa.eu/