Legalize / European Union / Implementing Regulation

Commission Implementing Regulation (EU) 2018/1624 of 23 October 2018 laying down implementing technical standards with regard to procedures and standard forms and templates for the provision of information for the purposes of resolution plans for credit institutions and investment firms pursuant to Directive 2014/59/EU of the European Parliament and of the Council, and repealing Commission Implementing Regulation (EU) 2016/1066 (Text with EEA relevance.)

Type Implementing Regulation

Publication 2018-11-07

Last updated 2022-03-24

State Repealed

Department European Commission, FISMA

Source EUR-Lex

articles 11

Reform history JSON API

49.Critical services shall be the underlying operations, activities and services performed for one (dedicated services) or more business units or legal entities (shared services) within the group which are needed to provide one or more critical functions. Critical services may be performed by entities within the group (internal service) or be outsourced to an external provider (external service). A service shall be considered critical where its disruption can present a serious impediment to, or completely prevent, the performance of critical functions as they are intrinsically linked to the critical functions that an institution performs for third parties.

50.Services that are performed entirely internally to a legal entity shall not be reported in this template.

51.Services that do not have a material impact on critical functions shall not be reported in this template.

52.The combination of values reported in columns 0005, 0010, 0030, 0050, 0070 and 0080 of this template forms a primary key which has to be unique for each row of the template.

II.8.2 Instructions concerning specific positions

Columns	Instructions
0005	Identifier
0010	Service type The service type shall be one of the service types listed below. Where possible, the sub-category shall be reported (two digit identification). Where no sub-category exists or no sub-category properly describes the service provided by the institution, the main category (one digit identification) shall be reported. 1. Human resources support 1.1. staff administration, including administration of contracts and remuneration 1.2. internal communication 2. Information technology 2.1. IT and communication hardware 2.2. data storage and processing 2.3. other IT infrastructure, workstations, telecommunications, servers, data centres and related services 2.4. administration of software licenses and application software 2.5. access to external providers, in particular data and infrastructure providers 2.6. application maintenance, including software application maintenance and related data flows 2.7. report generation, internal information flows and data bases 2.8. user support 2.9. emergency and disaster recovery 3. Transaction processing, including legal transactional issues, in particular anti-money laundering. 4. Real estate and facility provision or management and associated facilities 4.1. office premises and storage 4.2. internal facilities management 4.3. security and access control 4.4. real estate portfolio management 4.5. other, please specify 5. Legal services and compliance functions: 5.1. corporate legal support 5.2. business and transactional legal services 5.3. compliance support 6. Treasury-related services 6.1. coordination, administration and management of the treasury activity 6.2. coordination, administration and management of entities’ refinancing, including collateral management 6.3. reporting function, in particular with respect to regulatory liquidity ratios 6.4. coordination, administration and management of medium and long-term funding programs, and refinancing of group entities 6.5. coordination, administration and management of refinancing, in particular short-term issues 7. Trading/asset management 7.1. operations processing: trade capture, design, realisation, servicing of trading products 7.2. confirmation, settlement, payment 7.3. position and counterparty management, with respect to data reporting and counterparty relationships 7.4. position management (risk and reconciliation) 8. Risk management and valuation 8.1. central or business line or risk type-related risk management 8.2. risk report generation 9. Accounting 9.1. statutory and regulatory reporting 9.2. valuation, in particular of market positions 9.3. management reporting 10. Cash handling
0020-0030	Service recipient The entity of the group which receives the critical service reported in column 0010 from another group entity or the external provider reported in columns 0040-0050.
0020	Entity name Must be different from the name listed in column 0040.
0030	Code Unique identifier of the legal entity in column 0020 as reported in template Z 01.00 (ORG) Must be different from the identifier reported in column 0050.
0040-0050	Service provider The legal entity (internal or external) which provides the critical service reported in column 0010 to a group entity.
0040	Entity name Must be different from the name listed in column 0020.
0050	Code Unique identifier of the legal entity in column 0040. Must be different from the identifier listed in column 0030. Where the service provider is a group entity, the code shall be the same as reported in n template Z 01.00 (ORG). Where the service provider is not a group entity, the code of that entity shall be: — for institutions the 20-digit, alphanumeric LEI code; — for other entities the code shall be the 20-digit, alphanumeric LEI code or, if not available, a code under a uniform codification applicable in the Union or, if not available, a national code. The code shall be unique and used consistently across the templates.
0060	Part of the group ‘Yes’ – if the service is provided by an entity of the group (‘internal’) ‘No’ – if the service is provided by an entity outside of the group (‘external’)
0070-0080	Critical function The critical function the performance of which would suffer a serious impediment or be completely prevented in case of disruption of the critical service. It is one of the functions assessed as critical in template Z 07.01 (FUNC 1).
0070	Country Member State for which the function is critical, as reported in Z 07.01 (FUNC 1).
0080	ID ID of the critical functions as defined in chapter II.7.1 above and referred to in template Z 07.01 (FUNC 1).
0090	Estimated time for substitutability Estimated time necessary to substitute a provider with another one to a comparable extent as regards object, quality and cost of the service received. Report one of the following values: — ‘1 day – 1 week’, where the substitution time is no longer than a week; — ‘1 week – 1 month’, where the substitution time is longer than a week but no longer than a month; — ‘1 – 6 months’, where the substitution time is longer than a month but no longer than 6 months; — ‘6 – 12 months’, where the substitution time is longer than 6 months but no longer than a year; — ‘more than 1 year’, where the substitution time is longer than a year.
0100	Estimated time for access to contracts Estimated time necessary to retrieve the following information on the contract regulating the service following a request by the resolution authority: — duration of the contract — parties to the contract (authoring party and supplier, contact persons) and their jurisdiction — nature of the service (i.e. short description of the nature of the transaction between the parties, including prices) — whether the same service can be offered by any other internal/external provider (and identify potential candidates) — jurisdiction of the contract — department responsible for dealing with the main operations covered by the contract — main penalties included in the contract in case of suspension or delay on the payments — trigger for early termination and timing allowed for termination — operational support following termination — relevance for which critical functions and business lines Report one of the following values: — 1 day — 1 day – 1 week — more than 1 week — no contract regulating the service
0110	Governing law ISO code of the country the law of which governs the contract.
0120	Resolution-proof contract Reflects the assessment of whether the contract could be continued and transferred in resolution. The assessment shall take into account, among other factors: — any clause that would entitle a counterparty to terminate the contract solely as a result of resolution, early intervention measures or cross-default scenarios in spite of substantive obligations continuing to be performed; — any clause that would entitle a counterparty to alter the terms of service or pricing solely as a result of resolution, early intervention or cross-default scenarios in spite of substantive obligations continuing to be performed; — the recognition, in the contract, of the suspension rights of resolution authorities. Report one of the following values: — ‘Yes’ – if the contract is assessed as resolution-proof — ‘No’ – if the contract is not assessed as resolution-proof — ‘Not assessed’ – if no assessment has been made

II.9 Z 09.00 – FMI Services – Providers and users – Mapping to critical functions

II.9.1 General remarks

53.This template identifies clearing, payments, securities settlement and custody activities, functions or services, the discontinuation of which can present a serious impediment to, or completely prevent, the performance of one or more critical functions.

54.This template shall be reported once for the entire institution or group.

55.Only the financial market infrastructures the disruption of which would present a serious impediment to, or prevent, the performance of a critical function shall be identified.

56.The combination of values reported in columns 0020, 0030, 0040, 0070 and 0100 of this template forms a primary key which has to be unique for each row of the template.

II.9.2 Instructions concerning specific positions

Columns	Instructions
0010-0020	User Group entity using payments, custody, settlement, clearing or trade repository services, as reported in Z 01.00 – Organisational structure (ORG).
0010	Entity Name Name of the entity using payments, custody, settlement, clearing or trade repository services, as reported in Z 01.00 – Organisational structure (ORG). Only entities which are identified as providing critical functions in Z 07.02 shall be reported.
0020	Code Code of the entity using payments, custody, settlement, clearing or trade repository services, as reported in Z 01.00 – Organisational structure (ORG).
0030-0040	Critical Function Critical function performed by the entity, the performance of which would be impeded or prevented by the disruption of access to the payments, custody, settlement, clearing or trade repository service.
0030	Country Country for which the function is critical, as reported in Z 07.01 (FUNC 1).
0040	ID ID of the critical functions as defined in chapter II.7.1 above and referred to in template Z 07.01 (FUNC 1).
0050-0070	Financial Market Infrastructure (FMI) Reference: CPMI, Principles for financial market infrastructures A multilateral system among participating financial institutions, including the operator of the system, used for the purposes of recording, clearing or settling payments, securities, derivatives or other financial transactions.
0050	System Type Report one of the following values: ‘PS’ Payment System ‘(I) CSD’ – (International) Central Securities Depository, including (I) CSD that provide settlement services (internally or outsourced) ‘SSS’ Securities Settlement System without custody ‘CCP-Securities’ Central Counterparty for Securities Clearing ‘CCP-Derivatives’ Central Counterparty for Derivatives Clearing ‘TR’ Trade Repository ‘Other’ when the system type of the FMI does not match any of the pre-defined types mentioned above ‘NA’ when critical payments, clearing, settlement or custody services are provided by an entity that is not a financial market infrastructure mentioned above, for example custodian banks.
0060	Name Commercial name of the financial market infrastructure When ‘NA’ is reported in column 0050, this column shall be left empty.
0070	FMI Code The code of the FMI. Where available, the code shall be the 20-digit, alphanumeric LEI code. Where the LEI is not available, a code under a uniform codification applicable in the Union or, if not available, a national code. When ‘NA’ is reported in column 0050, this column shall be left empty.
0080	Participation Mode Report one of the following values: ‘Direct’ in case of direct membership or direct participation ‘Indirect’ in case of indirect membership or indirect participation ‘NA’ when ‘NA’ is reported in column 0050.
0090	Name Commercial name of the intermediary when ‘Indirect’ or ‘NA’ is reported in column 0080. When ‘Direct’ is reported in column 0080, ‘NA’ (for Not Applicable) shall be reported. The intermediary may be either part of the group to which the reporting entity belongs or another credit institution not related to that group. An intermediary can be a firm that provides clearing, payments, securities settlement and/or custody services to other firms (especially when ‘NA’ is reported in column 0050); it can be a direct member of one or several FMIs and provide indirect access to the services offered by such FMIs (especially when ‘Indirect’ is reported in column 0080).
0100	Code The code of the intermediary. Where available, the code shall be the 20-digit, alphanumeric LEI code. Where the LEI is not available, a code under a uniform codification applicable in the Union or, if not available, a national code. When ‘Direct’ is reported in column 0090, ‘NA’ (for Not Applicable) shall be reported.
0110	Service description Description of the service if the system type reported in column 050 is ‘Other’ or ‘NA’.
0120	Governing Law ISO 3166-1 alpha-2 identification of the country whose law governs the access to the FMI. In case of direct membership or direct participation, it is the governing law of the contract between the financial market infrastructure and the user which has to be reported. In case of indirect membership or indirect participation, it is the governing law of the contract between the representative institution and the user which has to be reported.

II.10 Critical information systems

II.10.1 General remarks

57.This section consists of the following templates:

a) Z 10.01 – Critical information systems (General information) (CIS 1), which lists all critical information systems in the group;

b) Z 10.02 – Mapping of critical information systems (CIS 2), which maps the critical information systems onto user entities in the group and critical functions.

58.A Critical Information System (‘CIS’) shall be understood as an IT application or software which supports a critical service the disruption of which would present a serious impediment to, or prevent, the performance of a critical function.

59.These templates shall be reported for the entire group.

II.10.2 Z 10.01 – Critical information systems (General information) (CIS 1): Instructions concerning specific positions

60.The value reported in column 0010 of this template forms a primary key which has to be unique for each row of the template.

Columns	Instructions
0010 – 0040	Critical Information System
0010	System Identification Code The system identification code is an acronym set by the institution that identifies unequivocally the critical information system. This is a row identifier and shall be unique for each row in the template.
0020	System name Commercial or internal name of the system.
0030	System Type Report one of the following values: — ‘Custom-Built Software For Business Support’ — Applications that have been developed in accordance with detailed business specifications. It may have been developed internally or by external contractors, but always with the purpose of business support. — ‘Software Purchased As-Is’ — Applications purchased in the market, typically sold or licensed by a vendor, that were not modified in terms of specific customizations to the organisation’s business. Applications that were subjected to normal configuration mechanisms are included in this category. — ‘Software Purchased With Custom Modifications’ — Applications purchased in the market but where the vendor (or its representative) has created a specific version for the context of that installation. This particular version is characterised by changes in the application behaviour, by new features or by inclusion of non-standard plug-ins developed according to the organisation’s business. — ‘Application/External Portal’ — External portals or applications provided by third parties, typically by partners, to access the services they offer. Normally they are outside the scope of the information systems management of the organisation, and are installed, maintained and managed by the partner itself. Such applications often take the form of portals (accessible via the internet or private networks), and despite being outside the scope of the information systems management services of the organisation, they are important (or critical) to some business functions.
0040	Description Description of the main purpose of the information system in the business context.
0050 – 0060	Group Entity Responsible for the System
0050	Entity name Name of the legal entity responsible for the system within the group. This is the entity responsible for the overall procurement, development, integration, modification, operation, maintenance and retirement of an information system and is a key contributor in developing system design specifications to ensure that the security and user operational needs are documented, tested and implemented.
0060	Code Code of the legal entity responsible for the system within the group, as reported in Z 01.00 – Organisational structure (ORG).

II.10.3 Z 10-02 – Mapping of information systems (CIS 2): Instructions concerning specific positions

61.The combination of values reported in columns 0010, 0030, 0040, 0050 and 0060 of this template forms a primary key which has to be unique for each row of the template.

Columns	Instructions
0010	System Identification Code The information system identification code as reported in column 010 of template Z 10.01 (CIS 1).
0020-0030	Group Entity user of the System The entity that uses the system within the group (‘user’). In case of several users, a separate row for each user of the same information system shall be reported.
0020	Entity name Name of the user entity, as reported in Z 01.00 (ORG)
0030	Code Code of the user entity, as reported in Z 01.00 (ORG)
0040	Critical service The identifier of the critical service, as reported in Z 08.00 (column 0005), which the system supports. The critical service may in itself be an IT service or another type of service which the information system supports (for example transaction processing).
0050-0060	Critical function The critical function that would be seriously hindered or completely prevented by a disruption of services supported by the information system. There might be several critical functions, in which case several rows for the same information system shall be reported.
0050	Country Country for which the function is critical, as reported in Z 07.01 (FUNC 1).
0060	ID ID of the critical functions as defined in chapter II.7.1 above and referred to in template Z 07.01 (FUNC 1).

ANNEX III

Single data point model

All data items set out in Annex I shall be transformed into a single data point model which is the basis for uniform IT systems of institutions and resolution authorities.

The single data point model shall meet the following criteria:

(a) provide a structured representation of all data items set out in Annex I;

(b) identify all the business concepts set out in Annex I;

(c) provide a data dictionary identifying table labels, ordinate labels, axis labels, domain labels, dimension labels and member labels;

(d) provide metrics which define the property or amount of data points;

(e) provide data point definitions that are expressed as a composition of characteristics that univocally identify the financial concept;

(f) contain all the relevant technical specifications necessary for developing IT reporting solutions producing uniform resolution planning data.

ANNEX IV

Validation rules

The data items set out in Annex I shall be subject to validation rules ensuring data quality and consistency. The validation rules shall meet the following criteria:

(a) define the logical relationships between relevant data points;

(b) include filters and preconditions that define a set of data to which a validation rule applies;

(d) check the accuracy of the reported data;

(e) set default values which shall be applied where the relevant information has not been reported.

Directive 2013/36/EU of the European Parliament and of the Council of 26 June 2013 on access to the activity of credit institutions and the prudential supervision of credit institutions and investment firms, amending Directive 2002/87/EC and repealing Directives 2006/48/EC and 2006/49/EC (OJ L 176, 27.6.2013, p. 338).

Regulation (EU) No 575/2013 of the European Parliament and of the Council of 26 June 2013 on prudential requirements for credit institutions and investment firms and amending Regulation (EU) No 648/2012 (OJ L 176, 27.6.2013, p. 1).

Commission Implementing Regulation (EU) 2021/451 of 17 December 2020 laying down implementing technical standards for the Regulation (EU) No 575/2013 of the European Parliament and of the Council with regard to supervisory reporting of institutions and repealing Implementing Regulation (EU) No 680/2014(OJ L 97, 19.3.2021, p. 1–1955).

Regulation (EC) No 1606/2002 of the European Parliament and of the Council of 19 July 2002 on the application of international accounting standards (OJ L 243, 11.9.2002, p. 1).

Detailed information may be found at the following website: www.leiroc.org.

Council Directive 86/635/EEC of 8 December 1986 on the annual accounts and consolidated accounts of banks and other financial institutions (OJ L 372, 31.12.1986, p. 1).

Commission Delegated Regulation (EU) 2016/778 of 2 February 2016 supplementing Directive 2014/59/EU of the European Parliament and of the Council with regard to the circumstances and conditions under which the payment of extraordinary ex post contributions may be partially or entirely deferred, and on the criteria for the determination of the activities, services and operations with regard to critical functions, and for the determination of the business lines and associated services with regard to core business lines (OJ L 131, 20.5.2016, p. 41).

Reading this document does not replace reading the official text published in the Official Journal of the European Union. We assume no responsibility for any inaccuracies arising from the conversion of the original to this format.

This text is published under EUR-Lex's own terms of reuse, not a Legalize or public-domain licence. EUR-Lex
Creative Commons Attribution 4.0 International (CC BY 4.0)
© European Union, https://eur-lex.europa.eu — Source: EUR-Lex (Publications Office of the European Union). Reused under the Creative Commons Attribution 4.0 International (CC BY 4.0) licence. Only EU legislation published in the printed Official Journal of the European Union is deemed authentic; consolidated texts are reproduced here for documentation purposes and have been reformatted to Markdown.