News & Press
EBA announces date and time of the publication of the 2025 EU-wide stress test results
The European Banking Authority (EBA) announced today that the results of the 2025 EU-wide stress test, including individual results for participating banks, will be published on Friday, 1 August 2025 at 18:00 CEST.
Final Q&As
Question ID: 2024_7098
According to Article 28(3) of DORA, must an EU parent bank, which has subsidiaries both within and outside the EU, maintain the register of information regarding all contractual arrangements for the use of ICT services only for subsidiaries that are subject to DORA (financial entities established in the EU), or does this requirement extend to subsidiaries established outside the EU for which DORA does not apply?
Question ID: 2024_7178
In the "RTS on ICT Risk Management Framework and on simplified ICT Risk Management Framework"; How should we read: ''A separate and dedicated network for ICT asset administration, along with strict prohibition of direct internet access[...]''? (article 13, paragraph 1, sub (c)).
A separate and dedicated network could be on-premises, but is a virtual-LAN sufficient? or is it enough to have it in the regular production-LAN with other systems? and what if the CMDB is in a cloud environment? is it then a de facto separated and dedicated network or not?
Question ID: 2025_7297
Do financial entities must include non-financial entities within the same group in the Register of Information?
If not, why is there an option to do so?