EBA Guidelines

The European Banking Authority (EBA) issues guidelines that harmonise supervisory requirements across Europe. The most relevant for providers are the "EBA Guidelines on outsourcing arrangements" (EBA/GL/2019/02): they require institutions to keep an outsourcing register, run a risk analysis, perform due diligence before signing and monitor their providers on an ongoing basis. With the introduction of DORA, the ICT-related parts have largely moved into the DORA framework; for non-ICT outsourcing the EBA Guidelines remain authoritative. Legally they are addressed to supervisory authorities and institutions, not directly to providers.

Even though the EBA Guidelines formally address the institutions, the requirements land on the provider. Your financial customer has to assess you before and during the collaboration, embed you contractually and monitor you, and passes that on as questionnaires, evidence requests and audit rights. The content overlaps heavily with DORA and outsourcing requests, yet is rarely reused. Whoever handles these requirements confidently and fast stays deliverable in the regulated space.

With Tendry you answer requests around the EBA Guidelines and your financial customers' outsourcing management from a verified, reusable knowledge base. How institutions manage their outsourcing on the buyer side is shown by our platform Leno.