BaFin published guidance on outsourcing to cloud service providers. This guidance, which represents a joint assessment by BaFin and the Deutsche Bundesbank, is addressed to credit institutions, financial services institutions, insurance undertakings, pension funds, investment services enterprises, capital management companies, payment institutions, and e-money institutions. The guidance does not establish any new requirements but instead reflects the current supervisory practice in outsourcing cases.
The guidance pursues the objective of creating, for the supervised entities, an awareness of the issues involved in dealing with cloud services and the related requirements of supervisory law. It draws attention to various aspects that the supervised entities should take into account when outsourcing to cloud service providers, for example, in the context of risk analysis and contractual terms. Over the past months, BaFin and Bundesbank have been in discussions with cloud service providers as well as with the supervised entities about plans for outsourcing to cloud service providers. Furthermore, at the EIOPA and the EBA levels, within the Single Supervisory Mechanism, as well as bilaterally between the national supervisory authorities, a constant exchange about how to deal with outsourcing to cloud service providers has emerged.
Keywords: Europe, Germany, Banking, Insurance, Securities, Cloud Outsourcing, Guidance, Cloud Computing, Operational Risk, Bundesbank, BaFin
Previous ArticleIASB Publishes Work Plan and Meeting Updates for June 2019
The European Banking Authority (EBA) published the final guidelines on the monitoring of the threshold and other procedural aspects on the establishment of intermediate parent undertakings in European Union (EU), as laid down in the Capital Requirements Directive (CRD).
In a recent Market Notice, the Bank of England (BoE) confirmed that green gilts will have equivalent eligibility to existing gilts in its market operations.
The Financial Conduct Authority (FCA) published the policy statement PS21/9 on implementation of the Investment Firms Prudential Regime.
The European Banking Authority (EBA) proposed regulatory technical standards that set out criteria for identifying shadow banking entities for the purpose of reporting large exposures.
The Board of the International Organization of Securities Commissions (IOSCO) proposed a set of recommendations on the environmental, social, and governance (ESG) ratings and data providers.
The European Securities and Markets Authority (ESMA) published recommendations from the Working Group on Euro Risk-Free Rates (RFR) on the switch to risk-free rates in the interdealer market.
The European Commission (EC) announced plans to defer the application of 13 regulatory technical standards under the Sustainable Finance Disclosure Regulation (2019/2088) by six months, from January 01, 2022 to July 01, 2022.
The European Insurance and Occupational Pensions Authority (EIOPA) proposed to amend the supervisory statement on supervision of run-off undertakings that are subject to Solvency II regulation.
The Bank of England (BoE) published a consultation paper on approach to setting minimum requirement for own funds and eligible liabilities (MREL), an operational guide on executing bail-in, and a statement from the Deputy Governor Dave Ramsden.
The European Banking Authority (EBA) is seeking preliminary input on standardization of the proportionality assessment methodology for credit institutions and investment firms.