Regulatory Alerts2021-11-23 | NBB_2021_26Added · Updated
Reporting on operational and security risks of payment services by payment and electronic money institutions
Payment institutions and electronic money institutions governed by Belgian law must submit an annual comprehensive assessment of operational and security risks related to their payment services, including inherent risk levels, mitigation measures, and residual risk. The report must also evaluate compliance with EBA Guidelines on ICT and security risk management and detail any developments since the previous submission or authorization. Institutions may satisfy this statutory obligation by completing standardized IT risk questionnaires and practical instructions made available annually by the National Bank of Belgium. This circular applies from 1 January 2022 and replaces circular NBB_2020_24.
Share