
Guidelines on ICT and security risk management – Update from CBI
On 28 December 2019, the European Banking Authority (EBA) published Guidelines on ICT and security risk management under Directive (EU) 2015/2366. These Guidelines establish requirements for credit institutions, investment firms