21
Nov
The rules on the use of information and communication technology ("ICT") in the financial sector were traditionally country and institution-specific to a great extent and predominately focused on the financial impact of ICT risks. Several recent EU legislative acts and guidelines of the European Banking Authority ("EBA"), the European Insurance and Occupational Pensions Authority ("EIOPA")and the European Securities and Markets Authority ("ESMA"), such as the 2021 Guidelines on ICT and security risk management and the cloud outsourcing guidelines, have...