On 23 February 2026, the European Banking Authority (EBA) published a follow-up report (the Report) of its peer review on information and communication technology (ICT) risk assessment under the Supervisory Review and Evaluation Process (SREP).
Background
The Report is a follow-up to the EBA peer review report published