254. As part of all SREP assessments, competent authorities should form a view on the degree of ICT …

As part of all SREP assessments, competent authorities should form a view on the degree of ICT risk, and the consistency of ICT operations with the business strategy. Competent authorities should include in their assessment all relevant aspects of ICT risk, such as security risk, IT projects risk and ICT management risk, to the extent that this is not already covered by other parts of these guidelines, and having regard to the EBA Guidelines on ICT and security risk²¹ and the ESMA Guidelines on outsourcing to cloud service providers²² ;

²¹ EBA Guidelines on ICT and security risk management (EBA/GL/2019/04).

²² ESMA Guidelines on outsourcing to cloud service providers (ESMA50-164-4285).

1. Pārskats

1.1 Atsauces

1.2 Identificētās prasības

1.3 Saistītie standarti

2. Identificētās prasības

3. Saistītie standarti

• EBA -

  EN: Guidelines and other publications of the European Banking Authority (EBA), https://www.eba.europa.eu/. © European Banking Authority. Reproduction is authorised provided the source is acknowledged (EBA legal notice). Divided into sections and converted into the GRCA format, the wording unchanged. Only the versions published by the EBA are authoritative.

  DE: Leitlinien und weitere Veröffentlichungen der Europäischen Bankenaufsichtsbehörde (EBA), https://www.eba.europa.eu/. © European Banking Authority. Wiedergabe mit Quellenangabe gestattet (Rechtlicher Hinweis der EBA). In Abschnitte aufgeteilt und in das GRCA-Format umgewandelt, der Wortlaut unverändert. Maßgeblich sind allein die von der EBA veröffentlichten Fassungen.