+categories (level 1) categories (level 2)

categories (level 1) categories (level 2)

Legal risk Article 4(1), point (52a) of the CRR

Model risk Article 4(1), point (52b) of the CRR

ICT risk Article 4(1), point (52c) of the CRR	ICT availability and continuity risk ICT security risk (including cyber) ICT change risk ICT data integrity risk	The risk that performance and availability of ICT systems, data or services are adversely impacted, including the inability to timely recover the institution’s services, due to a failure of ICT hardware or software components; weaknesses in ICT system management; or any other event The risk that unauthorised access or malicious or intentional acts compromise ICT systems, data or services irrespective of whether they originate from within or outside the institution (e.g. cyber-attacks) The risk arising from the inability of the institution to manage changes to ICT systems or ICT services in a timely and controlled manner The risk that data stored and processed by ICT systems are incomplete, inaccurate or inconsistent across different ICT systems impairing the soundness or continuity of the institution’s services and activities and potentially resulting in operational, financial, legal, or reputational impact
Operational risk sub-Legal references/Definitions	Operational risk sub-	Legal references/Definitions

1. Visão geral

Título	Regulamentação

Requisitos
Fonte	Requisito

Normas
Fonte	Requisito

EBA -
EN: Guidelines and other publications of the European Banking Authority (EBA), https://www.eba.europa.eu/. © European Banking Authority. Reproduction is authorised provided the source is acknowledged (EBA legal notice). Divided into sections and converted into the GRCA format, the wording unchanged. Only the versions published by the EBA are authoritative.

DE: Leitlinien und weitere Veröffentlichungen der Europäischen Bankenaufsichtsbehörde (EBA), https://www.eba.europa.eu/. © European Banking Authority. Wiedergabe mit Quellenangabe gestattet (Rechtlicher Hinweis der EBA). In Abschnitte aufgeteilt und in das GRCA-Format umgewandelt, der Wortlaut unverändert. Maßgeblich sind allein die von der EBA veröffentlichten Fassungen.