The EBA publishes follow-up Report on ICT risk assessment under the Supervisory Review and Evaluation Process
The European Banking Authority (EBA) today published the follow-up to its 2022 peer review report on ICT risk assessment under the supervisory review and evaluation process (SREP). The follow-up Report shows that competent authorities have made notable progress in strengthening ICT risk assessment, driven largely by the implementation of the Digital Operational Resilience Act. At the same time, further work and continued investment remain necessary to ensure consistent and effective ICT risk supervision across the European Union (EU).