2025-06-27
The Prudential Control and Resolution Authority (ACPR) has declared its compliance with the European Banking Authority's guidelines EBA/GL/2025/02, which amend the 2019 rules on ICT and security risk management. These updated guidelines become applicable on May 20, 2025, to all credit institutions and financial entities subject to regulation under EU Directives 2013/36/EU, 2015/2366, and 2009/110/EC. The declaration confirms that the ACPR has aligned its supervisory framework with the revised EBA standards for managing technology-related risks.