Information and communication technology (ICT) risk management: range of practices

This version

BCBS  | 
Other
 | 
02 June 2026
 | 
Status:  Current

To strengthen banks' operational resilience to information and communication technology (ICT) incidents in an increasingly digitalised world, the Basel Committee analysed ICT risk management practices across jurisdictions to address non-malicious ICT incidents. The report aims to support banks in developing robust ICT risk management frameworks which are a critical aspect of operational risk management, contributing to the broader goal of achieving operational resilience.