CTPS 4.7 Requirement 6: Mapping

1A critical third party must:

1. (1)

   within 12 months of being designated by the Treasury, identify and document:

   1. (a)

      the resources, including the persons (including key nth-party providers), assets, supporting services and technology, used to deliver, support and maintain each systemic third party service it provides; and

   2. (b)

      any internal and external interconnections and interdependencies between the resources identified under (a) in respect of that service; and

2. (2)

   thereafter regularly update the process conducted under (1).