Sets governance and risk requirements for banks using cloud computing: board approval of the multiannual cloud plan (section 13), a risk assessment before contracting (section 23(a)), contract terms allowing Supervisor access (section 30(d)) and an annual report to the Banking Supervision Department (section 40). Version 4, Circular 2715 of 13 June 2022 (original issued 5 July 2017).
Who it applies to
Banking
Topics
Cybersecurity & IT RiskOperational Risk & Outsourcing
This site uses only the cookies it needs to work, such as keeping you logged in. It uses no advertising or tracking cookies.
Read the Cookie Notice.
Suggest a correction or addition
Spotted something wrong, missing or worth adding? Tell our editors. Every submission
is reviewed and verified against its source before anything changes — nothing you send appears on the
site automatically.
Thank you — our editors will review this
Your suggestion has been received. Contributions from practitioners keep these profiles accurate. Nothing appears on the site until an editor has verified it against its source.
