The Joint Committee of the European Supervisory Authorities, comprising the European Banking Authority, European Insurance and Occupational Pensions Authority and European Securities and Markets Authority, has published its 2027 work programme. It prioritizes digital operational resilience, financial innovation, consumer protection, sustainable finance, securitisation and cross-sectoral risk monitoring, while seeking to reduce overlapping requirements and support the European Union’s regulatory simplification agenda. Under the Digital Operational Resilience Act, the authorities will update the list of critical ICT third-party providers, conduct examinations and risk assessments, follow up on 2026 recommendations and report on major ICT incidents. This advances the oversight framework under which critical providers were first designated in 2025. The programme also provides for cyber crisis exercises, analysis of artificial intelligence and tokenisation, continued monitoring of BigTech financial services, and work to simplify the performance and cost sections of the key information document for packaged retail and insurance-based investment products. Other planned work includes preparing for revised Sustainable Finance Disclosure Regulation mandates, delivering technical measures arising from the securitisation reforms expected to be implemented in the first or second quarter of 2027, and monitoring nonbank involvement and international regulatory divergence in securitisation markets. The authorities will also publish twice-yearly cross-sectoral risk updates and develop reporting standards and stress-testing analysis for financial conglomerates.

Original source