Operational-resilience, business-continuity and third-party/outsourcing risk requirements for financial institutions. 52 publications, summarized in English and updated same-day.
Final report on amending Guidelines on ICT risk and security management
European Union
EBA
ESAs Decision on reporting of information for CTPP designation (corrigendum consolidated)
European Union
EBA
Data Model for DORA RoI
European Union
EBA
Final Report on revised SREP and supervisory stress testing Guidelines
European Union
EBA
Warning of the European Systemic Risk Board on systemic cyber risks from frontier AI models
European Union
ESRB
Final Report on the Framework for the 6th ESMA Stress Test Exercise for Central Counterparties
European Union
ESMA
Final Report - Guidelines on stress test scenarios under the MMF Regulation
European Union
ESMA
ESAs Final Report on Joint Guidelines on ESG Stress Testing
European Union
ESMA
Final report on guidelines on internal controls for benchmark administrators, credit rating agencies and market transparency infrastructures
European Union
ESMA
Guidelines on environmental scenario analysis
European Union
EBA
Final Report on Amendments to the RTS on Settlement Discipline
European Union
ESMA
Guidelines on outsourcing to cloud service providers (2025)
European Union
ESMA
Final Report on the revised Guidelines on outsourcing to cloud service providers
European Union
ESMA
Commission Delegated Regulation (EU) 2025/1143 on regulatory technical standards for approved publication arrangements, approved reporting mechanisms, and consolidated tape providers
European Union
EC
Commission Delegated Regulation (EU) 2025/532 on ICT subcontracting for financial entities
European Union
EC
ESAs Opinion on the rejection of the RTS on subcontracting under DORA
European Union
ESMA
Commission Delegated Regulation (EU) 2025/1190 on threat-led penetration testing standards
European Union
EC
ESAs Decision on reporting of information for CTPP designation (corrigendum)
European Union
EBA
Commission Delegated Regulation (EU) 2025/420 on joint examination teams for critical ICT third-party service providers
European Union
EC
Commission Implementing Regulation (EU) 2024/2956 laying down implementing technical standards for standard templates for the register of information
European Union
EC
ESAs Decision on Reporting of Information for CTPP Designation
European Union
EBA
Commission Delegated Regulation (EU) 2025/295 on regulatory technical standards for oversight of critical ICT third-party service providers
European Union
EC
Commission Delegated Regulation (EU) 2025/301 on regulatory technical standards for major ICT-related incident notifications
European Union
EC
Commission Implementing Regulation (EU) 2025/302 on standard forms and procedures for reporting major ICT incidents and cyber threats
European Union
EC
Showing the 24 most recent of 52. Browse the full catalogue