EBA Guidelines on the sound management of third-party risk regarding non-ICT services

How can supervisors ensure sound third-party risk management without placing disproportionate burdens on institutions and supervisors alike? The European Banking Authority (EBA) has published its final Guidelines on the management of third-party risk, part of its ongoing effort to simplify and strengthen the EU regulatory framework. The Guidelines focus on third-party arrangements supporting critical or […]

When Machines Attack: Frontier AI Cyber Threats and Policy Responses in the Financial Sector

FSI Occasional Paper No. 28 Frontier AI models can autonomously identify vulnerabilities and conduct sophisticated cyberattacks — but does that require a new regulatory framework, or a faster execution of existing ones? The Financial Stability Institute (FSI) of the Bank for International Settlements (BIS) has published FSI Occasional Paper No. 28, examining how frontier AI is transforming […]

The 2026 Global AI in Financial Services Report: Adoption, Impact and Risks

As AI reshapes financial services at an accelerating pace, are regulatory authorities keeping up — or falling further behind? The Cambridge Centre for Alternative Finance (CCAF) at the University of Cambridge, in collaboration with the BIS, IMF, World Economic Forum, IDB, CGAP, and the Arab Monetary Fund, has published the 2026 Global AI in Financial […]

Principles for the sound management of third-party risk

As part of its 2025–2026 work programme, the Basel Committee is advancing several supervisory initiatives related to the digitalisation of finance. Banks’ increasing reliance on third-party service providers requires moving beyond the traditional concept of outsourcing to encompass a broader range of third-party arrangements. These principles establish a common baseline for banks and supervisors in […]