Information Technology, European Banking Authority (EBA)

European Banking Authority publishes amending guidelines on ICT and security risk management in the context of DORA

A&O Shearman on 2/25/2025

The European Banking Authority (EBA) has published a final report with amending guidelines in respect of Guidelines EBA/GL/2019/04 on ICT and security risk management. The EBA reviewed the Guidelines in light of the Digital...more

The EU’s Digital Operational Resilience Act 2022/2554 (DORA)

BCLP on 9/23/2024

Long IT sub-contracting chains can make it hard for financial institutions to understand the vulnerabilities in their IT estate and the location of key functions (where these may be located in entities who do not have a...more

Offensive Security Under the EU Digital Operational Resilience Act (DORA)

Venable LLP on 7/19/2024

The Digital Operational Resilience Act (DORA) regulation is part of the European Union’s (EU) strategy to enhance the overall stability of the EU financial system by ensuring that financial entities are resilient to digital...more

Cloud, Data Centre Sale-Leasebacks and the Pandemic - Accelerating Trends for UK and European Regulated Firms

BCLP on 7/13/2021

The COVID-19 pandemic has accelerated the two linked trends of financial institutions transferring their IT infrastructure to the cloud and selling their self-owned data centres in order to lease back only the reduced space...more

UK Prudential Regulation Authority Clarifies Third-Party Risk Management Expectations

Morgan Lewis - Tech & Sourcing on 4/13/2021

The UK Prudential Regulation Authority (PRA) published a policy statement (PS7/21) and a supervisory statement (SS2/21) on clarifying and modernizing regulatory expectations of outsourcing and third-party risk management on...more

European Banking Authority Publishes Guidelines on Assessment of ICT Risk Under the Supervisory Review and Evaluation Process...

A&O Shearman on 10/13/2017

The European Banking Authority has published Guidelines for national regulators aimed at ensuring the convergence of supervisory practices in the assessment of the information and communication technology (ICT) risk under the...more

European Banking Authority Publishes Final Guidelines to Assess Information and Communication Technology Risk

A&O Shearman on 5/26/2017

The European Banking Authority has published final Guidelines on the assessment of the Information and Communication Technology (ICT) risk in the context of the Supervisory Review and Evaluation Process (SREP). These final...more

Information Technology › European Banking Authority (EBA)