EBA Guidelines on the sound management of third-party risk regarding non-ICT services
How can supervisors ensure sound third-party risk management without placing disproportionate burdens on institutions and supervisors alike? The European Banking Authority (EBA) has published its final Guidelines on the management of third-party risk, part of its ongoing effort to simplify and strengthen the EU regulatory framework. The Guidelines focus on third-party arrangements supporting critical or […]
Joint EBA-ECB Report on Payment Fraud: Strong Authentication Remains Effective but Fraudsters Are Adapting
Strong customer authentication has reduced payment fraud — but are security frameworks keeping pace with the tactics fraudsters are now using? The European Banking Authority (EBA) and the European Central Bank (ECB) have published their 2025 joint report on payment fraud in the European Economic Area (EEA). While the overall fraud rate remained stable at […]
Revised Guidelines on Common Procedures and Methodologies for the Supervisory Review and Evaluation Process (SREP) and Supervisory Stress Testing
How can supervisory frameworks become more risk-focused, proportionate, and efficient — without losing coherence or effectiveness? The European Banking Authority (EBA) has published its final revised Guidelines on common procedures and methodologies for the Supervisory Review and Evaluation Process (SREP) and supervisory stress testing, a core deliverable of its regulatory simplification and efficiency agenda. The […]
EBA Guidelines on supervisory independence of competent authorities – Final Report
Guidelines on supervisory independence of competent authorities under Directive 2013/36/EU The European Banking Authority (EBA) published its final Guidelines on Supervisory Independence under the Capital Requirements Directive (CRD). The Guidelines further clarify the arrangements that competent authorities should have in place to prevent and manage conflicts of interest involving both their staff and the members […]
Report on banks’ dry run testing of their recovery plans
The EBA published a Report comparing how banks test the implementation of their recovery plans through so-called “dry runs”. In a context of heightened uncertainty and the continued need for operational preparedness and resilience to unexpected stress events, the analysis confirms that dry runs are an effective tool to strengthen the operationalisation of recovery plans […]
Report on tackling ML TF risks in crypto-asset services through supervision: Lessons Learned from Recent Cases
The European Banking Authority (EBA) published a Report on tackling money laundering and terrorist financing (ML/TF) risks in crypto-asset services, including issuance, trading, and service provision. The Report draws on lessons learnt from recent supervisory cases across the EU and highlights how competent authorities can strengthen their approaches to supervision in this fast-evolving sector. The […]