1) When an ICT service supporting critical or important functions is subcontracted the financial entity shall fully monitor the ICT subcontracting chain and shall document it, including on the basis of the information provided by the ICT third-party service provider, in accordance with Article 28 paragraphs (3) and (9) of Regulation (EU) 2022/2554.
2) The financial entity shall monitor subcontracting conditions, including through the review of contractual documentation between ICT third-party service providers and subcontractors, as appropriate, and key performance indicators to ensure that all the conditions referred to in Article 4 are complied with along the entire ICT subcontracting chain.
|
Question 4 : Is article 5 appropriate and sufficiently clear? |