Under active development Content is continuously updated and improved

Article 8.1Article 8.1

>Control Description

As part of the ICT risk management framework referred to in Article 6(1), financial entities shall identify, classify and adequately document all ICT supported business functions, roles and responsibilities, the information assets and ICT assets supporting those functions, and their roles and dependencies in relation to ICT risk. Financial entities shall review as needed, and at least yearly, the adequacy of this classification and of any relevant documentation.

>Cross-Framework Mappings

Ask AI

Configure your API key to use AI features.