: The European Banking Authority (EBA) today published clear guidance for banks on how to manage enhanced reporting requirements for operational risk, following the postponement of the first reference date under the amended Implementing Technical Standards (ITS). This move comes after the European Commission adopted Regulation (EU) 2025/2475, which delays the application of new operational riskreporting obligations to the end of June
: The European Supervisory Authorities (EBA, EIOPA and ESMA) today published their first annual overview of major ICT-related incidents in the EU financial sector based on a reporting mechanism established by the Digital Operational Resilience Act (DORA). It shows that ICT risks are increasingly borderless and interconnected. The authorities also note that the recent evolution of highly capable AI-driven tools should encourage financial entities to strengthen cybersecurity measures to maintain their resilience going