Beyond Outsourcing: Understanding the New EBA Guidelines on Non-ICT Third-Party Risk

This webinar is intended for managers and professionals involved in third-party risk management, outsourcing, procurement, legal, compliance, operational risk, internal audit and business operations within financial institutions. It is also relevant to service providers seeking to understand their financial-sector clients’ evolving expectations.

The new EBA Guidelines on the sound management of third-party risk regarding non-ICT services broaden the approach to managing third-party relationships beyond traditional outsourcing and align it more closely with DORA. This webinar explores the key changes and their practical implications, helping participants identify which arrangements fall within scope and prepare their organisation for implementation.

By the end of this webinar, participants will be able to:

• Understand the main changes compared with the 2019 EBA Outsourcing Guidelines.
• Identify relevant non-ICT third-party arrangements and distinguish them from ICT services governed by DORA.
• Recognise the implications for governance, risk assessment, contracts and ongoing monitoring.
• Identify priorities for adapting their existing third-party risk management framework.

• Regulatory context: from outsourcing to broader third-party risk management.
• Scope, exclusions and interaction with DORA.
• Governance, responsibilities, proportionality and criticality assessment.
• Pre-contractual risk assessment and provider due diligence.
• Contractual requirements, subcontracting and concentration risk.
• Ongoing monitoring, business continuity and exit strategies.
• The non-ICT register of information and consistency with the DORA register.
• Implementation priorities and practical challenges.
• Questions and answers.

The attendance certificate can be downloaded 24 hours after the training course via your client portal.