Update of the guidelines for ICT and security risk management measures

Topic area:
Status: 12.02.2025 |
Current
Key words:
IT security / cyber risk, Internal governance, Hot topic
Initiative
Official name
Final Report Guidelines amending Guidelines EBA/GL/2019/04 on ICT and security risk management
Type
Guidelines
Level 3 / Other
Initiator
EBA
Submitted
11.02.2025
Doc. code
EBA/GL /2025/02
Summary
Status
Status

Get a subscription to have access to the whole content.

Current version
Final version
11.02.2025
Next step
Entry into force and application
Entry into force

Get a subscription to have access to the whole content.

Application date

Get a subscription to have access to the whole content.

Scope
Relevant for

Get a subscription to have access to the whole content.

Associated initiatives
Level 1
DORA - Improving digital operational resilience against cyberattacks (binding, Main version, EU)
Level 2
–
Level 3 / Other
Guidelines on ICT and security risk management (binding, EU)

Source: EBA, EBA/GL /2025/02, 2025