EBA Guidelines on ICT and Security Risk Management (EBA/GL/2024/07)
What is EBA Guidelines on ICT and Security Risk Management (EBA/GL/2024/07)?
The European Banking Authority Guidelines on ICT and security risk management (EBA/GL/2019/04, 28 November 2019, applied from 30 June 2020), addressed to financial institutions and payment service providers. (Reference corrected from a mislabelled 'EBA/GL/2024/07'.) Cover governance and strategy, the ICT and security risk management framework (identification, classification/risk assessment, mitigation, reporting, audit), information security (policy, logical and physical security, ICT operations security, monitoring, testing, training), ICT operations management and incident/problem management, ICT project and change management, business continuity management, and payment service user relationship management.
Map this against the frameworks you already hold
The compliance knowledge graph holds cross-framework control mappings for hundreds of standards, including the ones you are likely to be certified against already.
Browse the framework graph →How EBA Guidelines on ICT and Security Risk Management (EBA/GL/2024/07) groups its controls
Where EBA Guidelines on ICT and Security Risk Management (EBA/GL/2024/07) overlaps with the standards you already hold
What EBA Guidelines on ICT and Security Risk Management (EBA/GL/2024/07) means in your sector
What EBA Guidelines on ICT and Security Risk Management (EBA/GL/2024/07) means for your job
Questions people ask about EBA Guidelines on ICT and Security Risk Management (EBA/GL/2024/07)
What is EBA Guidelines on ICT and Security Risk Management?
Where does EBA Guidelines on ICT and Security Risk Management apply?
What frameworks does EBA Guidelines on ICT and Security Risk Management map to?
How do I get started with EBA Guidelines on ICT and Security Risk Management compliance?
Query EBA Guidelines on ICT and Security Risk Management (EBA/GL/2024/07) programmatically
EBA Guidelines on ICT and Security Risk Management (EBA/GL/2024/07) and every mapping into other standards are available over a REST endpoint and an MCP server, so an agent can read them directly. The free tier is 10 calls a day and needs no signup.
EBA Guidelines on ICT and Security Risk Management (EBA/GL/2024/07) API reference and MCP config →How ready are you for EBA Guidelines on ICT and Security Risk Management (EBA/GL/2024/07)?
Answer 25 questions and get a professional readiness report with gap analysis, maturity scores, and prioritised action items. Results in 5 minutes.