31. As part of the overall internal control framework including internal control mechanisms …

As part of the overall internal control framework including internal control mechanisms, financial entities should have a holistic risk management framework extending across all business lines and internal units. Under that framework, financial entities should establish whether an arrangement with a TPSP falls under the definition of third-party arrangement provided in these Guidelines. Under this assessment, consideration should be given to:

• a. determine whether the services they rely or plan to rely on are non-ICT services;
• b. whether the TPSP is providing non-ICT services supporting a function at least on a recurrent or ongoing basis; and
• c. whether the function under b) is critical or important.

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Standards

2. Identified Requirements

3. Related Standards

• EBA - Published by the European Banking Authority at https://www.eba.europa.eu/