-
What's new
- All What's new
-
European
- What's new - All
- <hr>
- What's new - last 24 hrs
- What's new - last 7 days
- What's new - last 30 days
- <hr>
- New EU Legislation
- European Commission
- European Banking Authority
- European Securities and Markets Authority
- European Insurance and Occupational Pensions Authority
- <hr>
- Consultations and similar
- Commentaries
- <hr>
- Downloads and Exports
- Latest news by Topics
-
International
- What's new - All
- <hr>
- What's new - last 24 hrs
- What's new - last 7 days
- What's new - last 30 days
- <hr>
- Bank for International Settlements
- Basel Committee on Banking Supervision
- Egmont Group
- International Association of Insurance Supervisors
- International Monetary Fund
- <hr>
- Consultations and similar
- Commentaries
- <hr>
- Downloads and Exports
- Latest news by Topics
- Downloads and Exports
- Legislation
- Organisations
-
Commentaries
- Consultations
- Sanctioned regimes
- IFRSs
- Regulatory calendar
- Quicklinks
-
More
Table of Contents
Page Overview
Document Overview
AI Disclaimer
Please note that AI-generated content should not be considered legal advice. Users are encouraged to consult with qualified professionals or legal advisors where specific legal guidance is required.
We are committed to transparency and responsible use of AI in a way that supports, but never replaces, human expertise.
If you have any questions or concerns about the use of AI on our platform, please feel free to contact us.
Article 85 Operational risk
1.Competent authorities shall ensure that institutions implement policies and processes to evaluate and manage exposures to operational risk, including risks arising from outsourcing arrangements and direct and indirect crypto-asset exposures and exposures to crypto-asset service providers, and to cover low-frequency high-severity events. Institutions shall articulate what constitutes operational risk for the purposes of those policies and procedures.
2. Competent authorities shall ensure that institutions have adequate contingency and business continuity policies and plans, including ICT business continuity policies and plans and ICT response and recovery plans for the technology they use for the communication of information, and that those plans are established, managed and tested in accordance with Article 11 of Regulation (EU) 2022/2554, in order to allow institutions to keep operating in the event of severe business disruption and limit losses incurred as a consequence of such disruption.