Meldingen door accountants
DNB brengt in herinnering dat externe accountants verplicht zijn om incidenten en signalen bij betaalinstellingen en elektronischegeldinstellingen aan DNB te melden.
Lees meer
Q&A on the use of 3rd party digital ID and password for strong customer authentication (SCA)
Question
Does the use of a 3rd party digital ID and password for strong customer authentication (SCA) require an outsourcing agreement in order to be compliant with Regulation (EU) 2018/389 - RTS on SCA and secure communication?
Answer
Yes. If a knowledge factor used in SCA processes is not under direct control of the payment service provider, DNB expects a valid outsourcing arrangement to ensure adequate management of operational risks. A knowledge factor such as 3rd party digital ID and password, which has not been issued by the payment service provider, cannot be deemed to be under the direct control of the payment service provider. Thus, the use of 3rd party digital ID and password must be subject to a valid outsourcing arrangement between the payment service provider and the 3rd party in order to be compliant with the Regulation (EU) 2018/389 - RTS on strong customer authentication and secure communication. This outsourcing arrangement must comply not only with the Delegated Regulation, but also the EBA guidelines on outsourcing.
Gerelateerde wet- en regelgeving:
Grondslag
Interessante artikelen
-
-
Webcast fiscale integriteitrisico’s voor banken
Op 9 december 2020 namen ruim 250 personen uit de bankensector deel aan de webcast fiscale integriteitrisico’s.
Lees meer -
Nationale implementatie richtlijn kapitaalvereisten
De aangepaste richtlijn kapitaalvereisten voor banken en beleggingsondernemingen is geïmplementeerd in de Nederlandse wetgeving. Deze richtlijn is – o.a. tezamen met de herziening van de verordening kapitaalvereisten (CRRII) – onderdeel van het Bankenpakket dat is gepubliceerd in juni 2019.
Lees meer