EBA Publishes Final Guidelines on ICT and Security Risk Management for EU Banks
The European Banking Authority (EBA) has issued final guidelines on ICT and security risk management, setting out requirements for banks to strengthen their resilience against cyber threats and operational disruptions. The guidelines, effective from 1 January 2027, mandate enhanced governance, risk assessment, and incident reporting frameworks.
Sign in to read RegWatch
RegWatch is available to registered Pideeco members. Free accounts can read 1 post per day. Upgrade for unlimited access and personalised alerts.
Or subscribe directly
RegWatch Premium
€89 / year (excl. VAT)
≈ €7.42 / month
- ✓Unlimited posts
- ✓All PREMIUM analyses
- ✓Personalised weekly digest
- ✓Instant critical alerts
- ✓Complete archive
- ✓Bookmarks & PDF export
Related updates
EBA E-mail Alert 16 July 2026: Key Regulatory Updates
The European Banking Authority (EBA) issued its e-mail alert on 16 July 2026, summarizing recent regulatory developments. The alert covers new guidelines, consultations, and other updates relevant to compliance officers in the financial sector.
16 Jul 2026
EBA ESG Risk Dashboard: Stable Climate Exposures and Better Data Quality in EU/EEA Banking
The EBA published its latest ESG risk dashboard for H2 2025, showing stable transition and physical climate risk exposures across EU/EEA banks. The share of exposures to climate-critical sectors remained at 62%, while mortgage energy-efficiency data availability improved. The dashboard supports supervisory monitoring of climate-related vulnerabilities.
06 Aug 2026
EBA consults on reporting framework for validation and monitoring of ISDA SIMM
The EBA has launched a consultation on a new reporting framework supporting its role as central validator of pro forma initial margin models under EMIR, specifically for the ISDA Standard Initial Margin Model (SIMM). The proposal introduces standardised, proportionate reporting requirements for counterparties seeking validation, with lighter annual reporting for firms with less significant OTC trading activity. Comments are due by 2 November 2026.
05 Aug 2026