The Basel Committee on Banking Supervision agreed to publish a report on observed information and communication technology risk management practices and to advance an expedited review of parts of its cryptoasset prudential standard, following its meeting in Basel on 19–20 May 2026. Its decisions were set out in a communiqué published on the Bank for International Settlements website.
The Committee said it approved a report on ICT risk management practices across jurisdictions addressing non-malicious ICT incidents, and that the report is scheduled to be published the following month. The Committee said the report will support operational resilience goals in an increasingly digitalised landscape.
ICT INCIDENTS IN FOCUS
Committee members also noted developments in artificial intelligence models and their cyber security implications, observing that frontier AI could help identify vulnerabilities while potentially enabling malicious cyber activities at increased speed and scale.
The Committee described the document as a range of practices report.
The Committee also discussed feedback received on its proposals for machine-readable Pillar 3 disclosures, and said an update on finalisation is expected later in 2026.
CRYPTOASSETS AND LIQUIDITY PRINCIPLES ADVANCE
On the digital assets file, the Committee progressed an expedited review of targeted elements of the prudential standard for banks' cryptoasset exposures. The Committee said it expects to provide an update later in 2026.
The Committee also agreed to consider whether targeted updates to its Principles for Sound Liquidity Risk Management and Supervision, first published in September 2008, are needed, citing a number of regulatory, supervisory and structural developments since then.
The Committee also agreed to consult later in 2026 on embedding the treatment of cross-border exposures within the European banking union in the G-SIB framework, and approved a workplan for further analytical work on the financial impact of extreme weather events on banks.