Art 8 - Identification

Article 8 obliges financial entities to keep an up-to-date inventory of their ICT assets, services and critical functions, to identify relevant third-party dependencies, and to use this information for risk assessment, monitoring and reporting, thereby establishing a clear digital footprint for supervisory oversight.