VISTA InfoSec

OCTOBER 20, 2023

According to the Contingency Plan Policy in HIPAA section 164.308(a)(7)(i) , covered entities must “formulate and execute, as needed, guidelines and procedures to respond to emergencies or other incidents (like system failure, fire, vandalism, or natural disaster) that damage systems containing ePHI.” What is a Contingency Plan Policy?

Disaster Recovery 130

Disaster Recovery Procedures Regulatory Compliance Duplicate 130

Neopay

OCTOBER 23, 2024

The ESAs raise concerns over the impacts and practicalities of the proposed EC changes to the draft ITS on the registers of information in relation to financial entities’ contractual arrangements with ICT third-party service providers.

Third-Party Service Provider 52

Third-Party Service Provider SWIFT Authorization Service Provider 52

PYMNTS

JULY 1, 2020

In its report, the OCC said that “operational risk is elevated, with banks implementing new processes and procedures, adopting pandemic-related continuity plans and responding to increased fraud and cyber risk.

OCC 66

OCC Compliance Risk Office of the Comptroller of the Currency 66

The Paypers

JUNE 18, 2025

Open Banking, referred to by Ottawa as consumer-driven banking, is intended to allow individuals and businesses to securely share their financial data with third-party service providers beyond traditional banks.

CBDC 36

CBDC Governance Government Third-Party Service Provider 36

EBizCharge

JULY 19, 2024

Yes, outsourcing payment processing to a PCI-compliant third-party service provider can help reduce your PCI scope and responsibilities. You must ensure the third party maintains compliance and appropriately manages cardholder data. Can outsourcing help with PCI compliance?

PCI DSS 52

PCI DSS Compliance Credit Cards Third-Party Service Provider 52

Basis Theory

OCTOBER 1, 2024

Third-Party Service Provider ( TPSP or "service provider") refers to an entity other than the Merchant, Acquirer, or Issuer involved in storing, processing, or transmitting card data. PCI additionally outlines requirements for user management procedures and rules.

PCI DSS 88

PCI DSS Compliance Encryption Assessments 88

Stax

AUGUST 22, 2024

Payfacs need to have regular AML screenings and strictly implement KYC procedures. Cyberattacks, human errors, third-party service provider failures, and system disruptions all come under operations risk. They also need to have strong data security protocols in place.

Risk Management 88

Risk Management Risk Regulatory Compliance Due Diligence 88