MaRisk AT 9 Outsourcing

The Bundesanstalt für Finanzdienstleistungsaufsicht ("BaFin") is responsible for the supervision of all banks, credit institutions, insurers, funds and financial institutions in Germany. Its objective is to ensure the functioning, stability and integrity of the German financial market. Article 9 of the Minimum Requirements for Risk Management (MaRisk AT 9 Outsourcing) provides guidance on how financial institutions can meet the outsourcing requirements in section 25b of the German Banking Act (Kreditwesengesetz). According to this section of the German Banking Act, financial institutions should take reasonable precautionary measures to avoid risk when outsourcing activities.

MaRisk AT 9 Outsourcing provides specific guidance for financial institutions on continuity, the outsourcing agreement, sub-outsourcing and monitoring outsourced activities.

Google Cloud's contracts for financial institutions in Germany address the requirements in MaRisk AT 9 Outsourcing. We have also created mappings to MaRisk AT 9 Outsourcing for both Google Cloud and Google Workspace to assist you with understanding how we can support you with meeting the requirements and assess us as an outsourced service provider. Google Cloud is committed to addressing these requirements regardless of how financial institutions choose to use our services.