SARB Issues Directive on Cloud Computing and Data Offshoring by Banks
SARB issued a directive (D3/2018) and guidance notes (G5/2018) on cloud computing and the offshoring of data by banks. The directive is applicable to all banks, controlling companies, branches of foreign institutions and auditors of banks or controlling companies. The directive will be effective from October 01, 2018.
The Prudential Authority of the country expects banks to follow a risk-based approach that is aligned with their risk appetite, based on the nature and size of operations, when implementing cloud computing and offshoring the data. The directive specifies that bank must have in place a formally defined and board approved data strategy and data governance framework. Banks must ensure that their risk and control frameworks, including their application, are designed and operative effectively to manage risks associated with the use of cloud computing and/or the offshoring of data. Banks that use cloud computing and/or offshore their data must ensure that they remain compliant with applicable legislation and regulations, both locally and in the country where cloud services and/or data are hosted.
Related Links
Effective Date: October 01, 2018
Keywords: South Africa, Banking, Fintech, Cloud Computing, Data Offshoring, Data Governance, SARB
Previous Article
OCC Proposes to Renew Information Collection on Stress Test RuleRelated Articles
HKMA Finalizes Policy Modules on Group-Wide Approach and Remuneration
The Hong Kong Monetary Authority (HKMA) revised the Supervisory Policy Manual module CG-5 that sets out guidelines on a sound remuneration system for authorized institutions.
EBA Guide to Monitor Threshold for Intermediate Parent Undertakings
The European Banking Authority (EBA) published the final guidelines on the monitoring of the threshold and other procedural aspects on the establishment of intermediate parent undertakings in European Union (EU), as laid down in the Capital Requirements Directive (CRD).
PRA Finalizes Approach to Supervision of International Banks
In a recent Market Notice, the Bank of England (BoE) confirmed that green gilts will have equivalent eligibility to existing gilts in its market operations.
FCA Issues PS21/9 on Implementation of Investment Firms Regime
The Financial Conduct Authority (FCA) published the policy statement PS21/9 on implementation of the Investment Firms Prudential Regime.
EBA Proposes Regulatory Standards to Identify Shadow Banking Entities
The European Banking Authority (EBA) proposed regulatory technical standards that set out criteria for identifying shadow banking entities for the purpose of reporting large exposures.
IOSCO Proposes Recommendations on ESG Ratings and Data Providers
The Board of the International Organization of Securities Commissions (IOSCO) proposed a set of recommendations on the environmental, social, and governance (ESG) ratings and data providers.
ESMA Group Issues Recommendations on RFR Switch in Interdealer Market
The European Securities and Markets Authority (ESMA) published recommendations from the Working Group on Euro Risk-Free Rates (RFR) on the switch to risk-free rates in the interdealer market.
ECB Study Assesses Impact of Basel III Finalization Package
The European Central Bank (ECB) published a paper as well as an article in the July Macroprudential Bulletin, both of which offer insights on the assessment of the impact of Basel III finalization package on the euro area.
ISDA Finds FRTB Results in Higher Capital Charges for Carbon Trading
The International Swaps and Derivatives Association (ISDA) published a paper that explores the impact of the Fundamental Review of the Trading Book (FRTB) on the trading of carbon certificates.
PRA Updates Remuneration Policy Statement Templates and Tables
The Prudential Regulation Authority (PRA) published the remuneration policy self-assessment templates and tables on strengthening accountability.
