Cloud: ESMA consults on cloud outsourcing guidelines / EBF Releases 3 technical papers
- ESMA has published a consultation paper on guidelines on outsourcing to cloud service providers
The guidelines’ purpose is to provide guidance on the outsourcing requirements applicable to financial market participants when they outsource to cloud service providers. In particular, they aim to help firms and competent authorities identify, address and monitor the risks and challenges that arise from cloud outsourcing arrangements.
The proposed guidelines set out :
- The governance, documentation, oversight and monitoring mechanisms that firms should have in place;
- The assessment and due diligence which should be undertaken prior to outsourcing;
- The minimum elements that outsourcing and sub-outsourcing agreements should include;
- The exit strategies and the access and audit rights that should to be catered for;
- The notification to competent authorities; and
- The supervision by competent authorities.
The proposed guidelines are consistent with the recommendations on outsourcing to cloud service providers published by the European Banking Authority (EBA) in February 2017 and subsequently incorporated into revised EBA guidelines on outsourcing arrangements in February 2019, and the guidelines on cloud outsourcing published by the European Insurance and Occupational Pensions Authority (EIOPA) in February 2020.
The consultation is open until 1 September and seeks feedback from both national competent authorities and financial market participants that use cloud services provided by third parties. The consultation is also important for cloud service providers, as the draft guidelines aim to ensure that potential risks firms may face from the use of cloud services are properly addressed. ESMA aims to publish the Final Report on the Guidelines by Q1 2021.
- EBF Cloud Banking Forum releases three technical papers
As cloud adoption by European Banks is key to the success of digital finance and innovation, the need for supervisory coordination and implementation becomes more evident. Through the Cloud Banking Forum, a cross-industry platform launched in 2017, EBF has published three technical papers providing legal and technical intelligence to National Competent Authorities of EU member states. Read more