58. As part of their risk management framework, financial entities should maintain an updated …

As part of their risk management framework, financial entities should maintain an updated register of information on all third-party arrangements that are within the scope of these guidelines, at individual and, where applicable, at sub-consolidated, and consolidated levels, as set out in Section 2, and should appropriately document all current third-party arrangements, distinguishing between arrangements supporting critical or important functions and other third-party arrangements. Where direct TPSPs of financial entities provide non-ICT services and said TPSPs use ICT subcontractors effectively underpinning such non-ICT services supporting critical or important functions as defined under Regulation (EU) 2022/2554, those should be documented in the register in line with the present guidelines.

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Standards

2. Identified Requirements

3. Related Standards

• EBA - Published by the European Banking Authority at https://www.eba.europa.eu/