The EBA consults on revised Guidelines on internal governance
The draft strengthens governance arrangements, clarifies management body roles, and enhances oversight of internal control, risk management, and compliance functions. It incorporates ICT and security risk management in line with DORA, requiring institutions to integrate digital operational resilience into governance frameworks. The revisions also address anti‑money laundering, conflicts of interest, and gender‑neutral remuneration. Stakeholders can submit feedback until October 2025, with final guidelines to replace the 2017 version.