+8. Unless otherwise specified, terms used and defined in Directive 2013/36/EU, Regulation (EU) No …
|
8. Unless otherwise specified, terms used and defined in Directive 2013/36/EU, Regulation (EU) No …
Unless otherwise specified, terms used and defined in Directive 2013/36/EU, Regulation (EU) No 575/2013 and definitions from the EBA SREP Guidelines have the same meaning in these Guidelines. In addition, for the purposes of these Guidelines, the following definitions apply: | ICT systems | ICT set-up as part of a mechanism or an interconnecting network that support the operations of an institution. | | ICT services | Services provided by ICT systems to one or more internal or external users. Examples include data entry , data storage, data |
5 Directive 2013/36/EU of the European Parliament and of the Council of 26 June 2013 on access to the activity of credit institutions and the prudential supervision of credit institutions and investment firms, amending Directive 2002/87/EC and repealing Directives 2006/48/EC and 2006/49/EC (1) - OJ L 176, 27.6.2013. 6 EBA/GL/2014/13 | ICT availability and continuity risk | processing and reporting services, but also monitoring, business and decision support services. The risk that performance and availability of ICT systems and data are adversely impacted, including the inability to timely recover the institution’s services, due to a failure of ICT hardware or software components; weaknesses in ICT system management; or any other event, as further elaborated in the Annex. | | ICT security risk | The risk of unauthorised access to ICT systems and data from within or outside the institution (e.g. cyber-attacks), as further elaborated in the Annex. | | ICT change risk | The risk arising from the inability of the institution to manage ICT system changes in a timely and controlled manner, in particular for large and complex change programmes, as further elaborated in the Annex. | | ICT data integrity risk | The risk that data stored and processed by ICT systems are incomplete, inaccurate or inconsistent across different ICT systems, for example as a result of weak or absent ICT controls during the different phases of the ICT data life cycle (i.e. designing the data architecture, building the data model and/or data dictionaries, verifying data inputs, controlling data extractions, transfers and processing, including rendered data outputs), impairing the ability of an institution to provide services and produce (risk) management and financial information in a correct and timely manner, as further elaborated in the Annex. | | ICT outsourcing risk | The risk that engaging a third party, or another Group entity (intra-group outsourcing), to provide ICT systems or related services adversely impacts the institution’s performance and risk management, as further elaborated in the Annex. |
1. Forbhreathnú
1.1 Tagairtí
1.2 Ceanglais aitheanta
1.3 Caighdeáin ghaolmhara
2. Ceanglais aitheanta
Ceanglais
| Foinse |
Ceanglas |
3. Caighdeáin ghaolmhara
Caighdeáin
| Foinse |
Ceanglas |
- EBA - Published by the European Banking Authority at https://www.eba.europa.eu/
|