Basel Committee Releases ICT Risk Management Practices Report

2026-06-02 · Regulation · QuoteReporter

Basel Committee Releases ICT Risk Management Practices Report

The Bank for International Settlements (BIS) announced on 02 June 2026 that the Basel Committee on Banking Supervision has published a report detailing observed information and communication technology (ICT) risk management practices across jurisdictions. The report focuses on addressing non-malicious ICT incidents that affect banks' operational resilience.

Key Findings & Data

The Basel Committee's report identifies and compares ICT risk management practices and regulatory approaches across different jurisdictions. It highlights the importance of ICT in operational risk management, supporting the broader goal of achieving operational resilience. The report specifically concentrates on non-malicious ICT incidents in banks that impact the delivery of critical operations and services, complementing the Committee's previous work on cyber resilience. The documented practices are intended to serve as reference points for banks and supervisory authorities to adapt and develop ICT risk management practices tailored to their specific circumstances.

Global Financial System Implications

The release of this report underscores the growing importance of ICT risk management in the banking sector, particularly as the financial landscape becomes increasingly digitalised. Banks' operational resilience to ICT incidents has become a critical concern. The report's findings are likely to influence how banks and regulatory bodies approach ICT risk management, potentially leading to enhanced operational resilience across the financial system. As the Basel Committee continues to monitor developments related to the digitalisation of finance and financial technology, its work is expected to have a positive impact on the stability of the global financial system.

Policy Signals

The publication of this report sends a clear signal that regulatory bodies are prioritising ICT risk management as a key component of operational risk management. By focusing on non-malicious ICT incidents, the Basel Committee is highlighting the need for robust risk management practices that address a wide range of potential disruptions, not just those caused by malicious activities. This emphasis is likely to shape financial regulation and supervisory practices, encouraging a more comprehensive approach to managing ICT risks.

BIS Outlook

The Basel Committee has indicated that it will continue to monitor developments related to the digitalisation of finance and financial technology from a prudential perspective. This includes tracking advancements in artificial intelligence models and their implications for banks' cyber security. As the financial sector continues to evolve, the Committee's ongoing work in this area is expected to inform future regulatory and supervisory initiatives, ensuring that the global financial system remains resilient in the face of emerging challenges.