Europejski Urząd Nadzoru Bankowego, Europejski Urząd Nadzoru Giełd i Papierów Wartościowych (European Securities and Markets Authority - ESMA), Europejski Urząd Nadzoru Ubezpieczeń i Pracowniczych Programów Emerytalnych (European Insurance and Occupational Pensions Authority - EIOPA), Ostateczny raport w sprawie projektu technicznych standardów regulacyjnych dotyczących określenia elementów, których potrzebuje podmiot finansowy do ustalenia i oceny przy zlecaniu usług ICT wspierających kluczowe lub ważne funkcje, zgodnie z wymogiem artykułu 30 ust. 5 Rozporządzenia (UE) 2022/2554.

JC 2024 53

Final report on Draft Regulatory Technical Standards to specify the elements which a financial entity needs to determine and assess when subcontracting ICT services supporting critical or important functions as mandated by Article 30(5) of Regulation (EU) 2022/2554

2. Executive Summary

Article 30(2)(a) of Regulation (EU) 2022/2554 requires financial entities to include in contractual arrangements on the use of ICT services a clear and complete description of all functions and ICT services to be provided by the ICT third-party service provider, indicating whether subcontracting of an ICT service supporting critical or important functions, or material parts thereof, is permitted and, when that is the case, the conditions applying to such subcontracting. The ESAs are mandated to develop jointly draft regulatory technical standards to further specify the elements which a financial entity needs to determine and assess when subcontracting ICT services supporting critical or important...