124. Within their assessment, competent authorities should take into account all risks, in …

Within their assessment, competent authorities should take into account all risks, in particular (⁵⁹ ):

• a. operational risks posed by the third-party arrangement;
• b. reputational risks;
• c. the step-in risk that could require the institution to bail out a TPSP, in the case of significant institutions;
• d. concentration risks within the institution, including on a consolidated basis, caused by multiple third-party arrangements with a single TPSP or closely connected TPSPs or multiple third-party arrangements within the same business area;
• e. concentration risks at the sectoral level, e.g. where multiple financial entities make use of a single TPSP or a small group of TPSPs;
• f. the extent to which the financial entity controls the TPSP or has the ability to influence its actions, and the reduction of risks that may result from a higher level of control and if the service provider is included in the consolidated supervision of the group; and
• g. conflicts of interest between the financial entity and the TPSP.

⁵⁹ For institutions subject to Directive 2013/36/EU, see also the EBA Guidelines on SREP: https://eba.europa.eu/regulation-and-policy/supervisory-review-and-evaluation-srep-and-pillar-2.

1. Visão geral

1.1 Referências

1.2 Requisitos identificados

1.3 Normas relacionadas

2. Requisitos identificados

3. Normas relacionadas

• EBA - Published by the European Banking Authority at https://www.eba.europa.eu/