TaxxaCompany Logo

Menu

Company

About usCareersBlogContact usLinkedInYouTube

Product

FeaturesPricingFAQ

Legal

Cookie PolicyData Processing AgreementPrivacy PolicyTerms and Conditions
© 2026 Taxxa AI Oy. All rights reserved.
  1. News
  2. /Norway
  3. /Financial Sector & Markets

Norway·Finanstilsynet

EBA consults on operational-risk rules until 31 December

The draft framework covers governance, risk-management processes and assessment systems, including DORA integration and proportionality for smaller institutions.

By Taxxa AI Oy · Published 2 September 2026

Financial Sector & Markets

Banks and other institutions concerned by the proposed operational-risk framework can respond to the European Banking Authority's consultation until 31 December 2026Finanstilsynet. The draft regulatory technical standards address the framework required under Article 323 of the Capital Requirements Regulation, CRR3Europa. The EBA identifies the standards as under consultation, so the current step is review and feedback on a proposal.

The proposed framework has three main components: governance and control arrangements, processes for managing operational risk, and systems for assessing operational riskFinanstilsynet. The EBA describes harmonised and proportionate requirements for identifying, assessing, monitoring and managing such risk across institutions.

Finanstilsynet says the proposal incorporates DORA's ICT-risk requirements as an integrated part of the operational-risk frameworkFinanstilsynet. Its notice also identifies specific proportionality provisions, including for institutions with a business indicator below EUR 750 millionFinanstilsynet. That threshold concerns proportionality in the proposed framework and should be assessed within the draft's requirements.

For Norwegian institutions, Finanstilsynet expects the resulting rules to be incorporated into the EEA Agreement and implemented through Norway's CRR frameworkFinanstilsynet. It asks firms to inform the supervisor of matters of particular importance to Norwegian interests. The notice says a separate Norwegian consultation will generally not be conducted when the rules are implementedFinanstilsynet, making the current consultation the stated opportunity to raise those concerns.

Responses can be submitted to the EBA. Its consultation page gives the response cutoff as 31 December 2026 at 23:59Europa and says contributions will be published after the consultation closes unless the contributor requests otherwiseEuropa. The same page provides registration for a public hearing, with a registration deadline of 25 September 2026 at 16:00Europa.

The EBA launched the consultation on 26 August 2026. Institutions considering a response can review the three proposed components, their interaction with DORA and the proportionality provisions against their own operational-risk arrangements.

The relevant materials are the EBA's draft RTS under CRR Article 323 and Finanstilsynet's consultation notice on the operational-risk management framework.

Review the draft operational-risk framework and submit comments to the EBA by 31 December 2026. Inform Finanstilsynet of issues important to Norwegian interests; hearing registration closes on 25 September.

Sources

  1. EBA foreslår krav til rammeverk for operasjonell risikostyring
  2. Regulatory Technical Standards on operational risk management framework | European Banking Authority

Share with your network

More on this

  1. 9 Sept 2026

    Finanstilsynet expects Nordnet to reassess risky retail trading

  2. 4 Sept 2026

    Norway bans specified Sudan gold trade from 15 September

  3. 20 Aug 2026

    KRT-1008 names a different access package for auditor signatures

  4. 20 Aug 2026

    KRT-1185 guidance adds an auditor signing-access requirement

  5. 12 Aug 2026

    KRT-1009 guidance specifies auditor access packages

Norway news