Search
428 results
Operational resilience
Operational resilience is defined as the ability of an institution to deliver critical operations through disruption. This builds on the prudential operational risk framework, encompassing internal governance, outsourcing, business continuity and relevant risk management-related aspects. Such ability enables an institution to identify and protect itself from threats and potential failures, respond and adapt to, as well as recover and learn from disruptive events in order to minimise their […]Digital Operational Resilience Act
Article 12
Backup policies and procedures, restoration and recovery procedures and methodsArticle 16
Simplified ICT risk management frameworkArticle 30
Key contractual provisionsThe ESA’s Joint Committee highlights digitalisation, cyber resilience and sustainable finance as key priorities of 2025
The Joint Committee of the European Supervisory Authorities (EBA, EIOPA and ESMA – the ESAs) today published its Annual Report for 2025, setting out the main priorities and achievements of its cross-sectoral work over the past year. In 2025, the Joint Committee focused on protecting consumers in increasingly digital financial markets, strengthening operational and cyber resilience through the implementation of the Digital Operational Resilience Act (DORA), improving the effectiveness of sustainable finance disclosures, and enhancing cross-sectoral risk monitoring.
Article 28
General principlesThe EBA repeals the Guidelines on major incident reporting under the revised Payment Services Directive
The European Banking Authority (EBA) today repealed its Guidelines on major incidents reporting under the Payment Services Directive (PSD2) due to the application of harmonised incident reporting under the Digital Operational Resilience Act (DORA) from 17 January 2025. The repeal of the Guidelines aims at simplifying the reporting of major incidents by payment service providers (PSPs) and providing legal certainty to the market.
Section
2Section
IESAs publish study on feasibility of further centralisation of major ICT-related incident reporting by financial entities
The three European Supervisory Authorities (EBA, EIOPA and ESMA – the ESAs) published today a report on the feasibility of further centralisation in the reporting of major ICT-related incidents by financial entities according to Article 21 of the Digital Operational Resilience Act (DORA).
Seconded National Experts
The ESAs acknowledge the European Commission's amendments to the technical standard on subcontracting under the Digital Operational Resilience Act
The European Supervisory Authorities (EBA, EIOPA and ESMA – the ESAs) today issued an Opinion on the European Commission’s (EC) rejection of the draft Regulatory Technical Standard (RTS) on subcontracting.
Implementing Technical Standards to establish the templates for the register of information
The ESAs announce timeline to collect information for the designation of critical ICT third-party service providers under the Digital Operational Resilience Act
The European Supervisory Authorities (EBA, EIOPA and ESMA – the ESAs) published today a Decision on the information that competent authorities must report to them for the designation of critical ICT third-party service providers under the Digital Operational Resilience Act (DORA). In particular, the Decision requires competent authorities to report by 30 April 2025 the registers of information on contractual arrangements of the financial entities with ICT third-party service providers.
Article 20
Harmonisation of reporting content and templatesArticle 31
Designation of critical ICT third-party service providersArticle 19
Reporting of major ICT-related incidents and voluntary notification of significant cyber threatsThe EBA publishes its Work Programme for 2025
The European Banking Authority (EBA) published today its Work Programme outlining the key priorities and initiatives for 2025. Throughout next year, the EBA will be i) implementing the EU Banking Package and enhancing the Single Rulebook, ii) enhancing risk- based and forward-looking financial stability for a sustainable economy, iii) enhancing data infrastructure and launching a data portal, iv) starting oversight and supervisory activities under the Digital Operational Resilience Act (DORA) and Markets in Crypto-Assets Regulation (MiCAR), and v) developing consumer oriented mandates and ensuring a smooth transition to the new anti-money laundering and countering the financing of terrorism (AML/CFT) framework.