About this Framework
The EBA Guidelines on ICT and Security Risk Management establish governance, risk management, outsourcing, security monitoring, incident management and operational resilience requirements for financial institutions. The guidelines form a foundation for ICT governance and complement DORA compliance initiatives.
Key Control Domains
ICT Governance
ICT Risk Management
Information Security
Third-Party Risk
Outsourcing
Operational Resilience
Incident Management
Security Monitoring
Who Needs This?
- Banks
- Credit Institutions
- Payment Service Providers
- Electronic Money Institutions
- Financial Service Organizations
Compliance Benefits
- Enhanced ICT governance
- Improved operational resilience
- Stronger third-party oversight
- Alignment with DORA requirements
- Reduced cyber and operational risk
Official Reference
EBA ICT and Security Risk Management Guidelines
https://www.eba.europa.eu
Assessment Details
Share this Assessment
Share this permanent link with your team, clients or auditors.
https://grcopilot.app/frameworks/eba-ict-guidelines