Featured Product

    EBA Publishes Final Report on Recommendations on Cloud Outsourcing

    December 20, 2017

    EBA published final guidance on the use of cloud service providers by financial institutions. The guidance, which is applicable as of July 01, 2018, is addressed to credit institutions, investment firms, and competent authorities.

    In its guidance, EBA offers recommendations that clarify the EU-wide supervisory expectations if institutions intend to adopt cloud computing, to allow them to leverage the benefits of using cloud services, while ensuring that any related risks are adequately identified and managed. The guidance builds on the existing guidelines on outsourcing developed by the Committee of European Banking Supervisors (CEBS) and provides additional clarity on cloud computing. The EBA recommendations address five key areas: security of data and systems; location of data and data processing; access and audit rights; chain outsourcing; and contingency plans and exit strategies. 

    The recommendations have been developed according to Article 16 of Regulation (EU) No 1093/2010, which mandates EBA to issue guidelines and recommendations addressed to competent authorities, with a view to establishing consistent, efficient, and effective supervisory practices and ensuring the common, uniform, and consistent application of EU law. The principle of proportionality applies throughout the recommendations, which should be employed in a manner proportionate to the size, structure, and operational environment of the institution as well as the nature, scale, and complexity of its activities. The recommendations fit into the broader EBA work on fintech, as cloud computing is an important enabling technology leveraged by financial institutions to deliver innovative financial products and services. The growing importance of cloud services as a driver of innovation and the increasing interest on the use of cloud outsourcing solutions within the banking industry have prompted EBA to develop these recommendations on its own initiative. 

     

    Related Link: Press Release

    Effective Date: July 01, 2018

    Keywords: Europe, EU, Banking, Cloud Outsourcing, Cloud Computing, Proportionality, Fintech, EBA

    Related Articles
    News

    APRA Updates Lists of Validation and Derivation Rules in December 2019

    APRA updated the lists of the Direct to APRA (D2A) validation and derivation rules for authorized deposit-taking institutions, insurers, and superannuation entities.

    December 13, 2019 WebPage Regulatory News
    News

    APRA Finalizes Prudential Standard for Credit Risk Management of Banks

    APRA updated the prudential standard on credit risk management requirements (APS 220) for authorized deposit-taking institutions, post a public consultation.

    December 12, 2019 WebPage Regulatory News
    News

    EIOPA Consults on Guidelines on ICT Security and Governance

    EIOPA issued a consultation on guidelines on the Information and Communication Technology (ICT) security and governance by insurers.

    December 12, 2019 WebPage Regulatory News
    News

    BCBS Consults on Design of Prudential Treatment for Crypto-Assets

    BCBS published a discussion paper on the design of prudential treatment for crypto-asset exposures of banks.

    December 12, 2019 WebPage Regulatory News
    News

    NCUA Approves Delay of Risk-Based Capital Rules Until January 2022

    The NCUA Board held its eleventh open meeting of 2019 and approved a final rule to delay the effective date of the risk-based capital rules for credit unions to January 01, 2022.

    December 12, 2019 WebPage Regulatory News
    News

    APRA Issues Operational Risk Rules, Consults on Reporting Requirements

    APRA published an updated prudential standard APS 115 that sets out operational risk requirements for authorized deposit-taking institutions in Australia.

    December 11, 2019 WebPage Regulatory News
    News

    ESMA Updates Q&A on European Benchmarks Regulation in December 2019

    ESMA updated the question and answers (Q&A) document on the European Benchmarks Regulation.

    December 11, 2019 WebPage Regulatory News
    News

    APRA Decides to Keep Countercyclical Capital Buffer for Banks at 0%

    APRA announced its decision to keep the countercyclical capital buffer (CCyB) for authorized deposit-taking institutions on hold at zero percent.

    December 11, 2019 WebPage Regulatory News
    News

    ESMA on Draft Amendments to Indices and Recognized Exchanges Under CRR

    ESMA issued the final report on draft amendments to the Implementing Regulation (EU) 2016/1646, which specifies the main indices and recognized exchanges, under the Capital Requirements Regulation (CRR), that are relevant to credit institutions and investment firms subject to prudential requirements and trading venues.

    December 11, 2019 WebPage Regulatory News
    News

    FED Extends Consultation Period for Capital Requirements for Insurers

    FED is extending comment period for the proposed rule establishing risk-based capital requirements for depository institution holding companies that are significantly engaged in insurance activities.

    December 10, 2019 WebPage Regulatory News
    RESULTS 1 - 10 OF 4316