+RTS ICT third-party service providers Art. 5 Ex-ante risk assessment
---+RTS ICT third-party service providers Art. 5, 1
---+RTS ICT third-party service providers Art. 5, 2
---+RTS ICT third-party service providers Art. 5, 3
------+RTS ICT third-party service providers Art. 5, 3a
------+RTS ICT third-party service providers Art. 5, 3b
------+RTS ICT third-party service providers Art. 5, 3c
------+RTS ICT third-party service providers Art. 5, 3d
------+RTS ICT third-party service providers Art. 5, 3e
------+RTS ICT third-party service providers Art. 5, 3f
------+RTS ICT third-party service providers Art. 5, 3g
------+RTS ICT third-party service providers Art. 5, 3h
------+RTS ICT third-party service providers Art. 5, 3i

1. Overview

RTS ICT third-party service providers Art. 5 Ex-ante risk assessment

Ex-ante risk assessment
RTS ICT third-party service providers Art. 5, 1 1.  The policy shall require that the business needs of the financial entity are defined before a contractual arrangement is concluded.
RTS ICT third-party service providers Art. 5, 2 2.  The policy shall require that a risk assessment is conducted at financial entity level and, where applicable, at consolidated and sub-consolidated level before a contractual arrangement is concluded.
RTS ICT third-party service providers Art. 5, 3 The risk assessment shall take into account all the relevant requirements laid down in Regulation (EU) 2022/2554 and applicable sectoral Union legislation. It shall consider, in particular, the impact of the provision of ICT services supporting critical or important functions by ICT thirdparty service providers on the financial entity and all the risks posed by the provision of those ICT services supporting critical or important functions by ICT thirdparty service providers, including the following:

1.1 References

1.2 Identified Requirements

1.3 Related Standards

2. Identified Requirements

Requirements

3. Related Standards

Standards
Impressum