+Section I Key principles for a sound management of ICT third-party risk
---+Article 28 General principles
------+Article 28 1
------+Article 28 2
------+Article 28 3
------+Article 28 4
------+Article 28 5
------+Article 28 6
------+Article 28 7
------+Article 28 8
------+Article 28 9
------+Article 28 10
---+Article 29 Preliminary assessment of ICT concentration risk at entity level
------+Article 29 1
------+Article 29 2
---+Article 30 Key contractual provisions
------+Article 30 1
------+Article 30 2
------+Article 30 3
------+Article 30 4
------+Article 30 5
---+Section II Oversight Framework of critical ICT third-party service providers
------+Article 31 Designation of critical ICT third-party service providers
---------+Article 31 1
---------+Article 31 2
---------+Article 31 3
---------+Article 31 4
---------+Article 31 5
---------+Article 31 6
---------+Article 31 7
---------+Article 31 8
---------+Article 31 9
---------+Article 31 10
---------+Article 31 11
---------+Article 31 12
---------+Article 31 13
------+Article 32 Structure of the Oversight Framework
---------+Article 32 1
---------+Article 32 2
---------+Article 32 3
---------+Article 32 4
---------+Article 32 5
---------+Article 32 6
---------+Article 32 7
---------+Article 32 8
---------+Article 32 9
------+Article 33 Tasks of the Lead Overseer
---------+Article 33 1
---------+Article 33 2
---------+Article 33 3
---------+Article 33 4
---------+Article 33 5
------+Article 34 Operational coordination between Lead Overseers
---------+Article 34 1
---------+Article 34 2
---------+Article 34 3
------+Article 35 Powers of the Lead Overseer
---------+Article 35 1
---------+Article 35 2
---------+Article 35 3
---------+Article 35 4
---------+Article 35 5
---------+Article 35 6
---------+Article 35 7
---------+Article 35 8
---------+Article 35 9
---------+Article 35 10
---------+Article 35 11
------+Article 36 Exercise of the powers of the Lead Overseer outside the Union
---------+Article 36 1
---------+Article 36 2
---------+Article 36 3
------+Article 37 Request for information
---------+Article 37 1
---------+Article 37 2
---------+Article 37 3
---------+Article 37 4
---------+Article 37 5
------+Article 38 General investigations
---------+Article 38 1
---------+Article 38 2
---------+Article 38 3
---------+Article 38 4
---------+Article 38 5
------+Article 39 Inspections
---------+Article 39 1
---------+Article 39 2
---------+Article 39 3
---------+Article 39 4
---------+Article 39 5
---------+Article 39 6
---------+Article 39 7
------+Article 40 Ongoing oversight
---------+Article 40 1
---------+Article 40 2
---------+Article 40 3
---------+Article 40 4
------+Article 41 Harmonisation of conditions enabling the conduct of the oversight activities
---------+Article 41 1
---------+Article 41 2
------+Article 42 Follow-up by competent authorities
---------+Article 42 1
---------+Article 42 2
---------+Article 42 3
---------+Article 42 4
---------+Article 42 5
---------+Article 42 6
---------+Article 42 7
---------+Article 42 8
---------+Article 42 9
---------+Article 42 10
---------+Article 42 11
------+Article 43 Oversight fees
---------+Article 43 1
---------+Article 43 2
------+Article 44 International cooperation
---------+Article 44 1
---------+Article 44 2

Section I Key principles for a sound management of ICT third-party risk

Section I Key principles for a sound management of ICT third-party risk

1. Overview

,
Article 28 General principles -
Article 29 Preliminary assessment of ICT concentration risk at entity level -
Article 30 Key contractual provisions -
Section II Oversight Framework of critical ICT third-party service providers Section II Oversight Framework of critical ICT third-party service providers

1.1 References

1.2 Identified Requirements

1.3 Related Standards

2. Identified Requirements

Requirements

3. Related Standards

Standards