44. Financial entities should: a. clearly assign the responsibilities for the documentation …

Financial entities should:

• a. clearly assign the responsibilities for the documentation, management, and monitoring of third-party arrangements;
• b. allocate sufficient resources to ensure compliance with all legal and regulatory requirements, including these Guidelines and the documentation, and monitoring of all third-party arrangements;
• c. taking into account the application of proportionality under Section 1 of these Guidelines, establish a role in order to monitor all third-party arrangements or designate a member of senior management within the financial entity as directly accountable to the management body and responsible for overseeing the third-party risks as part of the financial entity’s internal control framework and the documentation of third-party arrangements (⁴⁶ ). Less complex financial entities should at least ensure a clear division of tasks and responsibilities for the management and control of third-party risks and may assign the role to a member of the financial entity ’s management body.

⁴⁶ This role can be combined with the one in charge of monitoring the arrangements concluded with ICT third-party service providers on the use of ICT services under Article 5(3) of DORA.

1. Panoramica

1.1 Riferimenti

1.2 Requisiti identificati

1.3 Standard correlati

2. Requisiti identificati

3. Standard correlati

• EBA - Published by the European Banking Authority at https://www.eba.europa.eu/