Lesson 3 of 5

Cloud as outsourcing: criticality, due diligence, contracts and the supervisor

Supervisors treat a cloud service as one form of reliance on a third party, and apply the same disciplines: decide how critical the service is, check the provider before signing, write the essential rights into the contract, and keep the supervisor informed. This lesson follows those steps using the Basel Committee's 2025 principles and the European Banking Authority's guidelines on outsourcing.

Published 13 October 2026