Article 1 › 8

For the purposes of this Article, institutions shall ensure the soundness, robustness and performance of their IT systems and infrastructure necessary to maintain and update the loss data set, in particular by ensuring all of the following: (a) their IT systems and infrastructure are sound and resilient and that that soundness and resilience can be maintained on a continuous basis; (b) their IT systems and infrastructure are subject to configuration management, change management and release management processes; (c) where an institution outsources parts of the maintenance of its IT systems and infrastructure, the soundness, robustness and performance of the IT systems and infrastructure is ensured by confirming at least the following: (i) its IT systems and infrastructure are sound and resilient and that soundness and resilience can be maintained on a continuous basis; (ii) the process for planning, creating, testing and deploying the IT systems and infrastructure is sound and proper with reference to project management, risk management, governance, engineering, quality assurance and test planning, systems’ modelling and development, quality assurance in all activities, including code reviews and, where appropriate, code verification, and testing, including user acceptance; (iii) its IT systems and infrastructure are subject to configuration management, change management and release management processes; (iv) the process for planning, creating, testing and deploying the IT systems and infrastructure and contingency plans is approved by the management body or senior management and the management body and senior management are periodically informed about the IT systems and infrastructure performance.

← 7 · All articles · 9 →

Source: EUR-Lex CELLAR · retrieved 2026-09-04