2025-09-17

Regulations amending governance, risk management and control at credit institutions (FFFS 2024:28)

Finansinspektionen amended its regulations on governance, risk management, and control at credit institutions to align with the EU DORA Regulation by excluding ICT risk management and specific outsourcing agreements from its scope. The authority also updated definitions and clarified that provisions regarding the independence of the compliance function are governed by the MiFID II delegated regulation. These changes, which include repealing certain sections and inserting new ones, enter into force on 17 January 2025.

Finansinspektionen logo

Sweden

Finansinspektionen

Click to view full text