44. Financial entities should: a. clearly assign the responsibilities for the documentation …

Financial entities should:

• a. clearly assign the responsibilities for the documentation, management, and monitoring of third-party arrangements;
• b. allocate sufficient resources to ensure compliance with all legal and regulatory requirements, including these Guidelines and the documentation, and monitoring of all third-party arrangements;
• c. taking into account the application of proportionality under Section 1 of these Guidelines, establish a role in order to monitor all third-party arrangements or designate a member of senior management within the financial entity as directly accountable to the management body and responsible for overseeing the third-party risks as part of the financial entity’s internal control framework and the documentation of third-party arrangements (⁴⁶ ). Less complex financial entities should at least ensure a clear division of tasks and responsibilities for the management and control of third-party risks and may assign the role to a member of the financial entity ’s management body.

⁴⁶ This role can be combined with the one in charge of monitoring the arrangements concluded with ICT third-party service providers on the use of ICT services under Article 5(3) of DORA.

1. Vue d’ensemble

1.1 Références

1.2 Exigences identifiées

1.3 Normes associées

2. Exigences identifiées

3. Normes associées

• EBA - Published by the European Banking Authority at https://www.eba.europa.eu/