+RTS ICT third-party service providers Art. 8 Contractual clauses
---+RTS ICT third-party service providers Art. 8, 1
---+RTS ICT third-party service providers Art. 8, 2
------+RTS ICT third-party service providers Art. 8, 2a
------+RTS ICT third-party service providers Art. 8, 2b
------+RTS ICT third-party service providers Art. 8, 2c
------+RTS ICT third-party service providers Art. 8, 2d
---+RTS ICT third-party service providers Art. 8, 3
------+RTS ICT third-party service providers Art. 8, 3a
------+RTS ICT third-party service providers Art. 8, 3b
------+RTS ICT third-party service providers Art. 8, 3c
------+RTS ICT third-party service providers Art. 8, 3d
------+RTS ICT third-party service providers Art. 8, 3e
------+RTS ICT third-party service providers Art. 8, 3f
------+RTS ICT third-party service providers Art. 8, 3g
------+RTS ICT third-party service providers Art. 8, 3h
---+RTS ICT third-party service providers Art. 8, 4
|
1. Overview
RTS ICT third-party service providers Art. 8 Contractual clauses
Contractual clauses
| Summary |
Regulation |
|
RTS ICT third-party service providers Art. 8, 1
|
1. The policy shall specify that the relevant contractual arrangement are to be in written form and are to include all the elements referred to in Article 30(2) and (3) of Regulation (EU) 2022/2554. The policy shall also include elements regarding requirements referred to in Article 1(1), point (a), of Regulation (EU) 2022/2554, as well as other relevant Union and national law as appropriate.
|
|
RTS ICT third-party service providers Art. 8, 2
|
2. The policy shall specify that the relevant contractual arrangements are to include the right for the financial entity to access information, to carry out inspections and audits, and to perform tests on ICT. For that purpose, the policy shall require that the financial entity uses the following methods, without prejudice to the ultimate responsibility of the financial entity:
|
|
RTS ICT third-party service providers Art. 8, 3
|
3. The financial entity shall not over time rely solely on certifications referred to in paragraph 2, point (c), or audit reports referred to in point (d) of that paragraph. The policy shall only permit the use of the methods referred to in paragraph 2, points (c) and (d), where the financial entity:
|
|
RTS ICT third-party service providers Art. 8, 4
|
4. The policy shall ensure that material changes to the contractual agreement are to be formalised in a written document which is dated and signed by all parties and shall specify the renewal process for the contractual arrangements.
|
1.1 References
1.2 Identified Requirements
1.3 Related Standards
2. Identified Requirements
Requirements
| Source |
Requirement |
3. Related Standards
Standards
| Source |
Requirement |
|