A curated index of the EU regulatory and supervisory texts the ECB and NCAs expect senior banking candidates to recognise. Use it to refresh names, scopes, and where each piece fits in your interview.
Sixth iteration of the CRD. Updates the prudential regime for credit institutions: third-country branches, fit-and-proper for key function holders, governance, ESG-risk integration, and supervisory powers. The F&P assessment rules sit in Articles 91 and adjacent.
Open sourceImplements the final Basel III package in EU law. Output floor, credit risk SA & IRB recalibration, operational risk new standardised approach, CVA and market risk (FRTB). Reshapes RWAs, capital planning and ICAAP across the cycle.
Open sourceProcedural rules governing the SSM: significance assessment, common procedures, ECB/NCA cooperation, JST functioning, and the conduct of supervisory tasks — including the F&P assessment process itself.
Open sourceDirectly applicable AML Regulation, the 6th AML Directive, and the regulation creating the EU Anti-Money Laundering Authority (AMLA). Materially raises the floor on CDD, beneficial ownership, sanctions interface and group-wide AML governance.
Open sourceSingle ICT-risk and operational-resilience regime: ICT risk management, incident reporting, digital operational resilience testing (TLPT), and a harmonised oversight regime for critical ICT third-party providers.
Open sourceHarmonised regime for crypto-asset issuers, ARTs/EMTs and crypto-asset service providers. Authorisation, governance, prudential and consumer-protection rules.
Open sourceSuccessor framework to PSD2: a directive for authorisation and supervision of PIs/EMIs and a directly applicable regulation harmonising payment-services conduct rules, fraud reimbursement and access to payment systems.
Open sourcePersonal-data regime. Relevant for banking through KYC/AML data flows, profiling and automated decision-making, breach notification, and customer-data processing in retail and corporate banking.
Open sourceRisk-based regime for AI systems. Credit scoring and certain financial-services use cases sit in the high-risk category, with documentation, transparency, human-oversight and post-market monitoring requirements.
Open sourceThe ECB's expectations on suitability of management and supervisory bodies of significant institutions. Sets out the five dimensions: reputation, experience, knowledge, independence of mind, time commitment — plus collective suitability and interview practice.
Open sourceInternal governance arrangements for credit institutions: board responsibilities, risk culture, three lines, control functions, conflicts of interest, remuneration governance and group dimension.
Open sourceJoint guidelines on the assessment of the suitability of members of the management body and key function holders. Provide the operational frame around Article 91 CRD and ESMA equivalents.
Open sourceRole, tasks, independence and reporting lines of the AML/CFT compliance officer and the AML/CFT management-body member. Underpins MLRO F&P assessments and AMLA-readiness.
Open sourcePre-DORA baseline for ICT and security risk governance, asset management, change management, incident management and operational continuity. Still anchors the SREP IT-risk lens alongside DORA.
Open sourceSuite of risk-management guidelines: IRRBB, loan origination and monitoring, management of NPL/forborne exposures, ICAAP/ILAAP supervisory expectations and stress testing.
Open sourceIdentification of material risk takers, deferral, malus and claw-back, the proportionality framework, and the interaction with risk culture and conduct.
Open sourceJoint RTS/ITS under DORA — ICT risk-management framework, classification and reporting of major incidents, TLPT, sub-contracting of critical/important functions and the register of information.
Open sourceAnnual priorities the SSM communicates to significant institutions. Drives JST workplans and SREP focus areas — currently centred on credit risk in a higher-rate environment, governance, climate & cyber/operational resilience.
Open sourceThe Supervisory Review and Evaluation Process: business model analysis, internal governance and risk management, capital and liquidity risks, and the overall SREP score driving P2R, P2G and qualitative measures.
Open sourceSupervisory expectations on the integration of climate and environmental risks into business strategy, governance, risk appetite, ICAAP and disclosures.
Open sourcePublished enforcement and sanctioning decisions, supervisory letters and JST themed reviews. Useful for triangulating what 'good' and 'bad' look like in practice.
Open sourceGlobal prudential standards: Basel III/IV, corporate governance principles for banks, principles for the management of credit risk, operational risk, sound management of risks related to ML/TF.
Open sourceG-SIB framework, TLAC, resolution and crisis management, third-party risk, cyber-incident reporting and the supervisory and regulatory treatment of climate-related risks.
Open sourceStandards on market integrity, conduct, asset management, and the governance and oversight of intermediaries — relevant for conduct, compliance and committee chairs.
Open sourceCross-sectoral corporate-governance principles: shareholder rights, board responsibilities, disclosure, sustainability and stakeholder engagement. Useful frame for SB / NED / Chair work.
Open source