52. For the identified material ICT risks, competent authorities should assess whether the …

For the identified material ICT risks, competent authorities should assess whether the institution has specific controls in place to address these risks. The following sections provide a non-exhaustive list of the specific controls to be considered when assessing the material risks identified under point 3.2.3 that were mapped to the following ICT risk categories:

• a. ICT availability and continuity risks;
• b. ICT security risks;
• c. ICT change risks;
• d. ICT data integrity risks;
• e. ICT outsourcing risks.
• (a) Controls for managing material ICT availability and continuity risks

1. Forbhreathnú

1.1 Tagairtí

1.2 Ceanglais aitheanta

1.3 Caighdeáin ghaolmhara

2. Ceanglais aitheanta

3. Caighdeáin ghaolmhara

• EBA - Published by the European Banking Authority at https://www.eba.europa.eu/