Question
In Z_08.02, are we expected to map operational assets to external services or only to intra-entity services? If we are expected to map operational assets to external services, for external services which relate to support we receive on IT systems, should columns 0030, 0080, 0040 and 0050 be populated with data related to the respective IT system or should they be left blank? Additionally, if we report a service related to physical transportation of cash, should columns 0030, 0080, 0040 and 0050 be left blank considering that we don't need any asset to receive the service from the external provider?
Background on the question
The guidelines on populating the Z_08.02 template do not specify how columns 0030, 0080, 0040 and 0050 should be populated for external services.
Answer
Z 08.02 identifies operational assets that underpin services supporting critical functions or core business lines, including where the related service is provided externally. However, an asset owned and operated solely by a third-party service provider is outside the scope of Z 08.02 where no intra-group or intra-entity service provider requires access to it. Where an external provider supports an IT system or application that is owned, leased or licensed by a group entity and that asset supports the relevant service, the asset should be reported and columns 0030, 0040, 0050 and 0080 should be completed as applicable. Conversely, where an external service, such as physical cash transportation, does not depend on an operational asset of a group entity, no asset should be reported in Z 08.02 merely because the third party uses its own assets to provide the service. The relevant columns should therefore not be left blank for an asset that is otherwise reported; rather, no Z 08.02 asset record is required in that case.