meta_id 3208856

On June 2, 2026, the Basel Committee on Banking Supervision (BCBS) published a report analysing information and communication technology (ICT) risk management practices across jurisdictions. The report addresses non-malicious ICT incidents and supports banks in developing robust ICT risk management frameworks as a critical aspect of operational risk management. The BCBS conducted this analysis to strengthen banks' operational resilience to ICT incidents in an increasingly digitalised world. The report examines a range of ICT risk management practices currently implemented across different jurisdictions, providing banks with guidance on establishing comprehensive frameworks. By focusing on operational resilience through effective ICT risk management, the guidance contributes to the broader regulatory objective of ensuring financial stability and protecting the banking system from disruptions caused by technology-related failures and incidents. The report is intended to serve as a reference for banks seeking to enhance their ICT risk management capabilities. It provides a comprehensive overview of existing practices and recommendations that banks can adopt or adapt to their specific operational contexts. The guidance is particularly relevant for banks operating in multiple jurisdictions, as it reflects international best practices and regulatory expectations. The full report, comprising 23 pages, is available on the BCBS website in PDF format. REFERENCE: Basel Committee on Banking Supervision. "Information and Communication Technology (ICT) Risk Management: Range of Practices." June 2, 2026. https://www.bis.org/bcbs/