Regulations amending Finansinspektionen’s regulations on information security, IT operations and deposit systems (FFFS 2017:10)

Finansinspektionen issued regulations amending its guidelines on information security, IT operations, and deposit systems to align with MiFID 2 requirements. The amendment specifies that provisions regarding outsourcing agreements must adhere to Articles 30–32 of the MiFID 2 delegated regulation and Chapter 10 of the governance guidelines for credit institutions. These regulatory changes are scheduled to enter into force on 3 January 2018.

Get FI alerts — same-day email on every new publication.

Finansinspektionen’s Regulatory Code
Publisher: Finansinspektionen, Sweden, www.fi.se ISSN 1102-7460 This translation is furnished for information purposes only and is not itself a legal document. 1 Regulations amending Finansinspektionen’s regulations and general guidelines (FFFS 2014:5) regarding information security, IT operations and deposit systems; decided on 26 June 2017. Finansinspektionen prescribes pursuant to Chapter 5, section 2, point 5 of the Banking and Financing Business Ordinance (2004:329) that Chapter 3, section 6 of Finansinspektionen’s regulations and general guidelines (FFFS 2014:5) regarding information security, IT operations and deposit systems shall have the following wording.
Chapter 3
Section 6 Provisions regarding outsourcing agreements are set out in Articles 30–
32 of the delegated regulation for MiFID 2, and Chapter 10 of Finansinspektionen’s regulations and general guidelines (FFFS 2014:1) regarding governance, risk management and control at credit institutions. _______________ These regulations shall enter into force on 3 January 2018. ERIK THEDÉEN Claudia Bäckström FFFS 2017:10 Published on 30 June 2017

Read the rest free

Lineage: In force

amendssupersedesissued underrefers toproposed or not in RegAlertarrows run from the older text to the one that changes it

Source: Finansinspektionen — original document · Summary generated with machine assistance and reviewed before publication; the authoritative text is the regulator's original document. How RegAlert works