Outsourcing Risk Management Framework for PIs
What this control requires
Implement NBB Circular 2012/11 outsourcing risk management framework. Identify and classify all outsourced activities (critical/important/other). Conduct pre-outsourcing risk assessment. Maintain outsourcing register. Ensure contractual protections and audit rights in all outsourcing agreements.
Other NBB Circular controls
BE_NBB_CIRCULAR_2012_11-CTRL-001 - Daily safeguarding reconciliationBE_NBB_CIRCULAR_2012_11-CTRL-002 - Critical ICT incident reportingBE_NBB_CIRCULAR_2012_11-CTRL-003 - GDPR breach notification workflowBE_NBB_CIRCULAR_2012_11-CTRL-004 - AML suspicious transaction monitoringBE_NBB_CIRCULAR_2012_11-CTRL-005 - Quarterly PCI vulnerability assessmentBE_NBB_CIRCULAR_2012_11-CTRL-006 - Outsourcing provider oversightBE_NBB_CIRCULAR_2012_11-CTRL-007 - DORA Register of Information maintenanceBE_NBB_CIRCULAR_2012_11-CTRL-008 - CTIF suspicious activity escalationBE_NBB_CIRCULAR_2012_11-CTRL-009 - NIS2 cyber resilience testingBE_NBB_CIRCULAR_2012_11-CTRL-010 - Instant payment availability monitoringNBB2012-002-001 - Critical Outsourcing Monitoring and OversightNBB2012-003-001 - Outsourcing Notification and NBB Approval