EBA consults on ICT risk guidelines

The guidelines relate to the assessment of:

• ICT risks at senior management level and management body level;
• ICT strategy and its alignment with an institution's business strategy; and
• ICT risk exposures and the effectiveness of controls.

Comments are due by 6 January 2017.