Publicaciones del sector

Semiannual Basel III monitoring with data as of 31 December 2025: 149 banks, average CET1 of 13.9% for Group 1, LCR of 136.6% and NSFR of 123.3%, with every bank above 100% on liquidity.

Final EBA guidelines that replace the 2019 outsourcing guidelines with a framework for managing non-ICT third-party risk, centred on critical or important functions and aligned with DORA.

The FSI argues that frontier AI shortens remediation windows and amplifies third-party dependence, and that authorities are strengthening existing cyber resilience frameworks rather than creating new regimes.

Reference guide from the Superintendency of Banks for institutions to integrate the ESRMS into the credit cycle: governance, A, B and C categorization, due diligence, tools, high-impact sectors and practical cases.

Results of the ECB’s reverse stress test with 110 banks: each bank designed its own geopolitical scenario to deplete 300 basis points of CET1 capital, and the supervisor identified six areas for improvement.

The BIS annual report: investment in AI supported growth despite tariffs, but four pressure points remain (inflation, optimism about AI, financial vulnerabilities and fiscal pressure), with a new nexus between public debt and financial stability.

The EBA brings the SREP and supervisory stress testing into a single, simpler, risk-based framework that integrates ESG factors, operational resilience, ICT risk, third-country branches and the output floor. It applies from 1 January 2027.

Using confidential supervisory data on 109 euro area banks, the authors find that cybersecurity laggards raised their investment by about 81% after the ECB cyber stress test was announced, without capital charges or public disclosure.

The EBA’s spring risk report with data from 161 banks: resilience and balance sheet expansion, exposures to non-bank financial institutions close to 10% of assets, higher sovereign exposure (232% of CET1) and rising cyber risk.

The FSB proposes 12 sound practices for adopting artificial intelligence responsibly: organisation-wide governance, the lifecycle of each use case, cyber risk and third-party risk, applied proportionately.