RegAlert2020-06-16 | NBB_2020_23Added · Updated
Circular NBB_2020_23 / EBA Guidelines on ICT and security risk management
This circular implements the European Banking Authority Guidelines on ICT and security risk management (EBA/GL/2019/04) into Belgian supervisory practice, applying from 30 June 2020. It mandates that credit institutions, stockbroking firms, payment institutions, electronic money institutions, and relevant holding companies establish sound ICT and security risk management arrangements in compliance with the Banking Law of 25 April 2014 and the Payment Services Law of 11 March 2018. The document replaces Circular NBB_2018_13 and requires adherence to specific provisions regarding governance, information security, ICT operations, and business continuity. It also clarifies that these requirements apply on a consolidated basis to Belgian parent credit institutions and holding companies.
NBB published 1 document in the last 30 days — get each new one by email the day it lands.
Boulevard de Bedaimont 14-BE-1000 Brussels
Phone +32 2 221 48 66
Company number: 0203. 201. 340
RPM (Trade Register) Bmssels www. nbb. be rtl BanqueNatipnaleBank DEBELCIQUE VAN BELGtE Eurosystem Circular Brussels, 16 June 2020 Reference:
Contact person:
Thomas Plomteux
Phone +32 2 221 21 97 thomas. plomteux@nbb. be NBB 2020 23 European Banking Authority (EBA) Guidelines of 29 November 2019 on ICT1 and security risk management (EBA/GL/2019/04) . Credit institutions and stockbroking firms governed by Belgian law; . branches established in Belgium of credit institutions and stockbroking firms governed by the law of a non-EEA Member State; . payment institutions and electronic money institutions governed by Belgian law; . branches established in Belgium of payment institutions and electronic money institutions governed by the law of a non-EEA Member State2:
. in the context of consolidated supervision, group supen/ision or supplementary conglomerate supervision, financial holding companies and mixed financial holding companies. Summarv/Obiectives This Circular implements the Guidelines of the European Banking Authority (hereinafter referred to as the "EBA") on ICT and security risk management (EBA/GL/2019/04)3 and applies from 30 June 2020. This Circular replaces Circular NBB_2018_13, which ceases to apply from that date. 1 Information and communication technology. 2 Assuming that the legal provision of which the content is specified here is made applicable to the branches concerned. 3 httDs://eba. euroDa. eu/requlation-and-policv/intemal-aovemance/Quidelines-on-ict-and-securitv-risk-management. NBB 2020 23 - 16062020 Circular - Page 1/3
Read the rest free, and get an email when NBB publishes again
Lineage: In force
Source: National Bank of Belgium — original document · Summary generated with machine assistance and reviewed before publication; the authoritative text is the regulator's original document. How RegAlert works
More like this from NBB
NBB published 1 document in the last 30 days. We email you each new one the day it's published.