We are consulting on a new risk assessment framework proposed to evaluate applications to bank with us directly.

The European Banking Authority (EBA) published the conclusion of its peer review of how competent authorities supervise institutions’ ICT risk management and have implemented the EBA Guidelines on ICT risk assessment under the supervisory review and evaluation process (SREP). Overall, the analysis suggests that the competent authorities across the EU have applied a risk-based approach to the supervision of ICT risk management. The EBA has not identified any significant concerns regarding the supervisory practices but makes some general recommendations for further improvements.

Institutions for occupational retirement provision (IORPs) must carry out an own-risk assessment and provide BaFin with a report on this risk assessment. BaFin has evaluated these reports and identified points requiring further clarification, in addition to room for improvement. In order to provide assistance for the institutions, BaFin has formulated general guidance on own-risk assessments.