Nos derniers articles

This document presents the formal evaluation of proposed simplifications to the European Sustainability Reporting Standards (ESRS). While the EBA supports the overall goal of reducing the reporting burden for companies, it expresses significant concern that certain permanent reliefs and data omissions could lead to long-term information gaps. The authority argues that a lack of high-quality, quantitative sustainability data may hinder risk management, facilitate greenwashing, and ultimately threaten financial stability. To address these risks, the EBA recommends implementing time-limited transitions for specific disclosure exemptions to ensure companies eventually provide comprehensive metrics. Additionally, the EBA emphasizes the need for interoperability with global standards and calls for the retention of key indicators, such as greenhouse gas emissions intensity, to support informed investment decisions.

The EBA released an updated list of indicators for risk assessment and risk analysis tools, along with a revised methodological guide. This update does not introduce any additional reporting requirements for institutions or competent authorities. Instead, it clarifies how risk indicators are calculated in EBA publications, enabling users and competent authorities to interpret key banking figures consistently when conducting risk assessments and analyses.

The 𝗘𝗕𝗔 announces updated guidance for banks concerning 𝗲𝗻𝗵𝗮𝗻𝗰𝗲𝗱 𝗿𝗲𝗽𝗼𝗿𝘁𝗶𝗻𝗴 𝗿𝗲𝗾𝘂𝗶𝗿𝗲𝗺𝗲𝗻𝘁𝘀 𝗳𝗼𝗿 𝗼𝗽𝗲𝗿𝗮𝘁𝗶𝗼𝗻𝗮𝗹 𝗿𝗶𝘀𝗸. This guidance follows a postponement of the mandatory application date for new reporting obligations, now shifted from March 2026 to the 𝗲𝗻𝗱 𝗼𝗳 𝗝𝘂𝗻𝗲 𝟮𝟬𝟮𝟲 by the European Commission's Regulation (EU) 2025/2475. The EBA specifies that institutions must use the 𝗖𝗢𝗥𝗘𝗣 𝗢𝗙 𝗺𝗼𝗱𝘂𝗹𝗲 (𝗿𝗲𝗹𝗲𝗮𝘀𝗲 𝟰.𝟮) 𝗮𝗻𝗱 𝗰𝗹𝗮𝗿𝗶𝗳𝗶𝗲𝘀 𝘄𝗵𝗶𝗰𝗵 𝘀𝗽𝗲𝗰𝗶𝗳𝗶𝗰 𝗿𝗲𝗽𝗼𝗿𝘁𝗶𝗻𝗴 𝘁𝗲𝗺𝗽𝗹𝗮𝘁𝗲𝘀, 𝗖 𝟭𝟲.𝟬𝟮, 𝗖 𝟭𝟲.𝟬𝟯, 𝗮𝗻𝗱 𝗖 𝟭𝟲.𝟬𝟰, 𝗮𝗿𝗲 𝗻𝗼 𝗹𝗼𝗻𝗴𝗲𝗿 𝗿𝗲𝗾𝘂𝗶𝗿𝗲𝗱 𝗳𝗼𝗿 𝘁𝗵𝗲 𝗠𝗮𝗿𝗰𝗵 𝗿𝗲𝗳𝗲𝗿𝗲𝗻𝗰𝗲 𝗱𝗮𝘁𝗲 𝗯𝘂𝘁 𝘄𝗶𝗹𝗹 𝗯𝗲 𝗺𝗮𝗻𝗱𝗮𝘁𝗼𝗿𝘆 𝗶𝗻 𝗝𝘂𝗻𝗲 𝟮𝟬𝟮𝟲. This announcement also mentions the availability of updated technical instructions and IT solutions to help banks implement the revised operational risk reporting framework smoothly. Finally, this information is framed within the EBA's broader roles, which include developing harmonized rules, promoting supervisory convergence, and providing risk and data analysis for the European financial system.

Les nouvelles lignes directrices de l'EBA redéfinissent la gestion des risques environnementaux.
Fini la lecture du passé : place à l'analyse de futurs plausibles.
Un vrai tournant stratégique pour les risk managers européens. 🌍

The European Banking Authority (EBA) published its final Guidelines on environmental scenario analysis, which complement the EBA Guidelines on the management of Environmental, Social and Governance (ESG) risks by specifying supervisory expectations regarding how institutions should conduct environmental scenario analysis.

Le rapport 2024 sur la convergence de la supervision de l’EBA fait de la mise en œuvre de DORA une priorité stratégique européenne pour 2024–2026. L’Autorité renforce les capacités des superviseurs via la Supervisory Digital Finance Academy, soutenue par la Commission européenne. La hausse des questions liées à DORA révèle les défis du secteur : gestion des prestataires TIC, incidents, prestataires critiques et registre d’informations. Les institutions financières doivent s’attendre à une supervision plus technique et rigoureuse, et renforcer leurs dispositifs de résilience opérationnelle numérique pour répondre à des autorités mieux formées et plus exigeantes.

EBA has designated the development of supervisory capacity for DORA as a top-tier Union-wide strategic supervisory priority for the 2024-2026 cycle. Underscoring this priority are pressing industry concerns, evidenced by the submission of 28 new Q&As focused on 𝗗𝗢𝗥𝗔’𝘀 𝗽𝗿𝗶𝗺𝗮𝗿𝘆 𝗶𝗺𝗽𝗹𝗲𝗺𝗲𝗻𝘁𝗮𝘁𝗶𝗼𝗻 𝗵𝘂𝗿𝗱𝗹𝗲𝘀: 𝗜𝗖𝗧 𝘁𝗵𝗶𝗿𝗱-𝗽𝗮𝗿𝘁𝘆 𝗿𝗶𝘀𝗸 𝗺𝗮𝗻𝗮𝗴𝗲𝗺𝗲𝗻𝘁, 𝘁𝗵𝗲 𝗺𝗮𝗻𝗮𝗴𝗲𝗺𝗲𝗻𝘁 𝗮𝗻𝗱 𝗿𝗲𝗽𝗼𝗿𝘁𝗶𝗻𝗴 𝗼𝗳 𝗜𝗖𝗧-𝗿𝗲𝗹𝗮𝘁𝗲𝗱 𝗶𝗻𝗰𝗶𝗱𝗲𝗻𝘁𝘀, 𝘁𝗵𝗲 𝗼𝘃𝗲𝗿𝘀𝗶𝗴𝗵𝘁 𝗼𝗳 𝗰𝗿𝗶𝘁𝗶𝗰𝗮𝗹 𝗽𝗿𝗼𝘃𝗶𝗱𝗲𝗿𝘀, 𝗮𝗻𝗱 𝘁𝗵𝗲 𝗺𝗮𝗶𝗻𝘁𝗲𝗻𝗮𝗻𝗰𝗲 𝗼𝗳 𝘁𝗵𝗲 𝗿𝗲𝗴𝗶𝘀𝘁𝗲𝗿 𝗼𝗳 𝗶𝗻𝗳𝗼𝗿𝗺𝗮𝘁𝗶𝗼𝗻. In response, the EBA is executing a significant capacity-building initiative, delivering intensive, advanced training to supervisors through the Supervisory Digital Finance Academy (SDFA)—a multi-year effort coordinated with and backed by the European Commission. This convergence of strategic prioritization, targeted industry queries, and comprehensive supervisory training signals a new era of heightened and more sophisticated regulatory scrutiny. In consequence the digital operational resilience frameworks must be prepared to withstand proactive, in-depth, and increasingly specialized reviews from better-equipped competent authorities.

Le cadre juridique global de l’UE en matière de LBC/FT, aligné sur les normes internationales du GAFI, est centré sur l’Approche basée sur les risques (ABR). Ce principe impose une double application, définissant les responsabilités tant des autorités de supervision que des institutions financières. Les Autorités nationales compétentes (ANC) sont tenues de mener une supervision adaptée aux risques, garantissant que leur contrôle soit proportionné aux menaces identifiées. Parallèlement, les banques doivent mettre en œuvre des systèmes internes, des contrôles et des mesures de vigilance à l’égard de la clientèle efficaces, fondés sur leurs propres évaluations des risques. L’objectif stratégique de l’ABR est de veiller à ce que les efforts de supervision et les ressources institutionnelles soient alloués de manière proportionnée et efficace aux risques de BC/FT les plus élevés.

The EU's comprehensive AML/CFT legal framework, aligned with international FATF standards, is centered on the Risk-Based Approach (RBA). This principle mandates a dual application, defining responsibilities for both supervisory bodies and financial institutions. National Competent Authorities (NCAs) are mandated to conduct risk-sensitive supervision, ensuring their oversight is proportionate to identified threats. Concurrently, banks must implement effective internal systems, controls, and customer due diligence based on their own risk assessments. The strategic purpose of the RBA is to ensure that both supervisory efforts and institutional resources are allocated proportionately and effectively against the greatest ML/TF risks.

En 2026, l’Autorité Bancaire Européenne (EBA) intensifie la mise en œuvre du règlement DORA face aux cybermenaces croissantes et à la dépendance aux fournisseurs tiers. Les priorités incluent la surveillance directe des fournisseurs tiers critiques (CTPPs) via un cadre conjoint avec l’ESMA et l’EIOPA, des inspections ciblées et des analyses thématiques. L’EBA renforcera l’analyse des incidents TIC et publiera un rapport annuel sur les cybermenaces. Les institutions financières devront améliorer leurs cadres de gestion des risques TIC et leur résilience interne, sous une supervision accrue, pour assurer conformité et robustesse dans un environnement numérique complexe.