EBA GL 2017 05-CT GLs on ICT Risk Assessment under the Supervisory Review.pdf
EBA guidelines on ICT risk assessment under the Supervisory Review and Evaluation Process (SREP) – compliance status and implementation approaches by EU national competent authorities as of 2022.