European Insurance and Occupational Pensions Authority publishes 2027 Joint Committee programme prioritising digital resilience oversight and cyber crisis testing

The European Insurance and Occupational Pensions Authority has published the European Supervisory Authorities’ Joint Committee work programme for 2027, prioritising oversight of critical technology providers, cyber crisis preparedness and coordinated supervision across financial sectors. Building on the 2026 programme’s focus on digital resilience and consumer protection, the planned work will also address regulatory simplification, including opportunities to reduce overlapping reporting requirements. Under the Digital Operational Resilience Act (DORA), the authorities will update the list of critical information and communication technology third-party providers, conduct examinations and follow up on any recommendations issued in 2026. They will produce an annual report on major technology incidents and support the European Commission’s preparation of a potential legislative proposal reviewing DORA. Following framework development in 2025–2026, the pan-European Systemic Cyber Incident Coordination Framework will focus on testing, exercises and building members’ response capabilities. Innovation monitoring will place particular emphasis on artificial intelligence and tokenisation, alongside a third data collection exercise on BigTechs and mixed activity groups providing financial services. For retail investment disclosures, anticipated technical standards work depends on the legislative progress of the Retail Investment Strategy and would seek to simplify performance and cost information in key information documents. Sustainable finance work will support the review of the Sustainable Finance Disclosure Regulation while maintaining guidance on existing obligations. Preparations for revised securitisation transparency templates will continue without prejudging legislative negotiations, alongside closer alignment of supervisory practices. For financial conglomerates, the programme schedules consultation on capital adequacy reporting templates in the first quarter of 2027 and finalisation of the technical standard by year-end. The authorities will also continue publishing twice-yearly assessments of risks across financial sectors.