254. As part of all SREP assessments, competent authorities should form a view on the degree of ICT …

As part of all SREP assessments, competent authorities should form a view on the degree of ICT risk, and the consistency of ICT operations with the business strategy. Competent authorities should include in their assessment all relevant aspects of ICT risk, such as security risk, IT projects risk and ICT management risk, to the extent that this is not already covered by other parts of these guidelines, and having regard to the EBA Guidelines on ICT and security risk²¹ and the ESMA Guidelines on outsourcing to cloud service providers²² ;

²¹ EBA Guidelines on ICT and security risk management (EBA/GL/2019/04).

²² ESMA Guidelines on outsourcing to cloud service providers (ESMA50-164-4285).

1. Ülevaade

1.1 Viited

1.2 Tuvastatud nõuded

1.3 Seotud standardid

2. Tuvastatud nõuded

3. Seotud standardid

• EBA - Published by the European Banking Authority at https://www.eba.europa.eu/