On 15 October 2026 the ECB confirmed that banks will be able to report the profit and loss templates in their 2027 FINREP submissions under either IAS 1 or IFRS 18 until the EBA’s amended implementing technical standards (ITS) start to apply, which the ECB expects from the September 2027 reference period. Within the Single…
The ECB IT Risk Questionnaire (ITRQ) is where a significant institution puts a number on its own ICT risk before its Joint Supervisory Team does. Every bank under direct ECB supervision completes the workbook once a year, scoring its inherent ICT risk and the maturity of the controls that mitigate it. The 2026 questionnaire covers…
On 12 August 2026, ECB Banking Supervision published two linked newsletter articles: one reported shorter and more targeted on-site investigations, while the other reported a reduction in the stock of outstanding supervisory measures across significant institutions. The average on-site investigation, measured from kick-off to issuance of the final report, has already fallen from 33 weeks…
On 26 June 2026 the ECB announced a review of roughly 130 of its banking supervision publications, and in mid-July it followed through on the part that touches every capital and liquidity team: an updated ECB clarification on ICAAPs and ILAAPs and respective package submissions, alongside an updated version of the ECB Guide to the…
On 7 July 2026, the Chair of the ECB Supervisory Board, Claudia Buch, wrote to the CEO of every significant institution under a letter numbered SSM-2026-0301 and titled “Addressing AI-enabled cybersecurity threats”. The ECB AI cybersecurity letter does one operationally concrete thing behind its strategic language: it gives each directly supervised bank until 31 October…