On 7 July 2026 the European Systemic Risk Board published a formal warning that frontier artificial intelligence models are now a source of systemic cyber risk with direct implications for DORA cyber risk reporting across the EU financial system, and the three European Supervisory Authorities backed it the same day. On the same date, ECB…
On 1 July 2026 the three European Supervisory Authorities each opened a consultation on rewriting the Key Performance Indicators that firms disclose under Article 8 of the EU Taxonomy Regulation. ESMA published a Consultation Paper, the European Banking Authority a Discussion Paper, and EIOPA a consultation on the insurance side. All three close on 12…
Last updated: June 2026 If your firm filed a major incident under DORA in 2025, that report has now been counted. On 3 June 2026 the three European Supervisory Authorities published their first annual report on major ICT-related incidents, putting a hard number on what used to be guesswork: how many major incidents the EU…