+categories (level 1) categories (level 2)
|
categories (level 1) categories (level 2)
| ICT third-party risk | the risk that may arise for an institution in relation to its use of ICT services provided by ICT third-party service providers or by subcontractors of the latter, including through outsourcing arrangements (Article 3 (18) of DORA), including ICT concentration risk (Article 3 (29) of DORA) on both critical and non-critical ICT third-party services providers |
The risk that may arise for a financial entity in relation to the use of function provided by third-party service providers or by Third-party risk subcontractors of the latter, including the (non-ICT) provision of a function or the support to a function, including through outsourcing arrangements (upcoming EBA Guidelines on sound management of third-party risk) Credit risk (operational risk events related to credit risk not accounted Article 317 (5) of the CRR for in the risk-weighted exposure for credit risk) Market risk (operational risk events related to Article 317 (6) of the CRR market risk)
1. Vue d’ensemble
| Intitulé |
Réglementation |
,
1.1 Références
1.2 Exigences identifiées
1.3 Normes associées
2. Exigences identifiées
Exigences
| Source |
Exigence |
3. Normes associées
- EBA - Published by the European Banking Authority at https://www.eba.europa.eu/
|