Outsourcing management in banking under DORA

Over four mornings, you will learn all the key aspects of modern and regulatory-compliant outsourcing management in banks in a webinar from 9 am to 1 pm. You will then take a final exam in the form of an automated multiple-choice test. After passing the exam, you will receive a certificate that documents your expert knowledge of outsourcing management at banks and can serve as proof of expertise for internal and external stakeholders.

Webinar, 4 x 4 hours

Legal and regulatory requirements

• Introduction to the specific legal and regulatory requirements for banks when outsourcing services.
• Minimum Requirements for Risk Management (MaRisk), the EBA guideline on outsourcing, as well as requirements for the management of third-party ICT providers as part of the Digital Operational Resilience Act (DORA).

Technical basics - Important terms and definitions

• The most important types of service procurement (e.g. outsourcing, other external procurement, other external IT procurement, third-party ICT providers).
• Differentiation of the most important benefit reference types from one another using a compact and audit-proven decision tree.
• Fast, reliable and standardized classification of benefit types.

From the outsourcing strategy to a written order

• Introduction to a supervisory-compliant and at the same time practical instruction system with a corresponding hierarchy of guidelines.

Organizational structure in outsourcing management

• Presentation of the most important roles, e.g. central outsourcing officer, specialist outsourcing officer, subject matter experts/control functions, internal audit.
• Responsibilities in outsourcing management based on the three lines of defense model.

Process organization in outsourcing management - The most important steps in the outsourcing process

• Preliminary review/classification of the benefit.
• Outsourcing risk analysis (including approaches for qualitative and quantitative risk assessment methods, determination of materiality).
• Management, control and monitoring of service providers (including service-related internal control system).
• Reporting (notification ordinance, outsourcing register, annual report of the Central Outsourcing Officer).

Digitization of outsourcing management - Excel, IDV or software tools?

• Advantages and disadvantages of the most common technical solutions for successful outsourcing management.

Best-of internal and external findings in outsourcing management

• Presentation of a selection of frequently identified defects.
• Best practice approaches for solving or avoiding such complaints.

Wrap-up, discussion and exam preparation

Final examination

E-test

• Final examination in the form of an automated multiple-choice test, in which the knowledge imparted is checked.
• After passing the exam, you will receive a certificate that documents your expert knowledge of outsourcing management at banks and can serve as proof of expertise for internal and external stakeholders.
• You have 60 minutes to complete the exam. The seminar documents may be used as reference material. The examination is passed if you achieve 50% of the achievable number of points.