EBA publishes follow-up report on ICT risk assessment under SREP

The European Banking Authority (EBA) today published the follow-up to its 2022 peer review report on ICT risk assessment under the supervisory review and evaluation process (SREP). The follow-up Report shows that competent authorities have made notable progress in strengthening ICT risk assessment, driven largely by the implementation of the Digital Operational Resilience Act. Further work and continued investment are necessary for consistent and effective ICT risk supervision across the European Union (EU).