EBA Follow-Up Report On ICT Risk Assessment Under SREP

The European Banking Authority (EBA) has published a follow‑up report to its 2022 peer review on information and communication technology (ICT) risk assessment under the Supervisory Review and Evaluation Process (SREP). The report reviews the recommendations issued to competent authorities in 2022, considering progress made following the application of the Digital Operational Resilience Act (DORA) since January 2025, and the forthcoming integration of the ICT SREP Guidelines into the revised... By: A&O Shearman