Skip to Primary Navigation

Skip to main content

EBA narrows existing ICT guidelines

DORA ICT risk management requirements apply to financial entities in their place.

Article label: Quick Read

Thomas Hyrkiel

Photo: Getty Images
Click to share on Facebook (Opens in new window/tab) Click to share on X (Opens in new window/tab) Click to share on LinkedIn (Opens in new window/tab) Click to share on WhatsApp (Opens in new window/tab)

The amendments by the European Banking Authority (EBA) are intended to provide legal clarity and also avoid confusing duplication in guidelines applying to ICT risk management.

Paragraphs 1-91, which are contained in Section 3.1 to 3.7 of the EBA’s Guidelines on ICT and security risk management are being repealed, along with

, , , , , , , , ,

Get full access, free for a month

Start your 28-day free trial to continue reading and access all content on GRIP – no payment details required.

Start free trial
Sign in

What’s included:

  • Every new article, plus our 6,000+ archive
  • Daily regulatory insight and guidance
  • Exclusive interviews and in-depth analysis
  • Coverage of industry-leading events and conferences
  • All podcasts and videos, featuring industry experts
  • The full set of Rules Navigator tools
  • An ad-free experience