Basel Committee to Release ICT Risk Report, Advance Cryptoasset Review and Liquidity Updates

Why It Matters

The Basel Committee’s actions signal a tightening of supervisory expectations at a time when banks are increasingly dependent on complex digital infrastructure and are expanding into crypto‑related activities. By formalising ICT risk‑management guidance, the Committee aims to standardise cyber‑resilience practices, reducing the likelihood of systemic disruptions from cyber incidents. The accelerated crypto‑asset review could introduce new capital charges or disclosure mandates, compelling banks to reassess their exposure strategies and risk‑weighting models. Liquidity risk remains a cornerstone of banking stability. Any amendment to the 2008 Principles could reshape stress‑testing regimes and influence banks’ funding strategies, especially for institutions with significant short‑term wholesale funding. Together, these initiatives could raise compliance costs but also enhance the overall robustness of the global banking system, aligning supervisory standards with the realities of a digitised, geopolitically volatile environment.

Key Takeaways

• Basel Committee approved an ICT risk‑management report to be published next month.
• The Committee expedited its targeted review of banks’ crypto‑asset exposures, with an update expected later in 2026.
• Members will consider targeted updates to the 2008 liquidity‑risk principles this year.
• AI models are highlighted as both a tool for cyber‑security and a potential source of faster, larger cyber incidents.
• The Committee emphasized continued cross‑border information sharing and supervisory vigilance amid global economic uncertainty.

Pulse Analysis

The Basel Committee’s tri‑fold agenda reflects a broader regulatory pivot toward digital risk. Historically, operational risk frameworks lagged behind technological innovation; the new ICT report attempts to close that gap by codifying best practices across jurisdictions. This move could reduce regulatory arbitrage, as banks operating in multiple markets will face a more uniform set of expectations for cyber‑incident reporting and mitigation.

Crypto‑asset supervision has been fragmented, with national regulators taking divergent approaches. By fast‑tracking a global review, the Committee is positioning itself to deliver a cohesive standard that could harmonise capital treatment and disclosure requirements. Banks that have already built internal crypto‑risk units may gain a competitive edge, while laggards could face abrupt balance‑sheet adjustments once the final standards are released.

Liquidity risk updates are likely to be the most contentious. The 2008 Principles were crafted in a pre‑digital, pre‑pandemic world; today’s funding markets are characterised by rapid electronic flows and heightened sensitivity to geopolitical shocks. Any tightening of liquidity buffers could pressure banks to shift toward more stable funding sources, potentially reshaping the wholesale funding landscape. Market participants should monitor the Committee’s forthcoming consultation papers for clues on the direction of future liquidity standards, as early positioning could mitigate the impact of stricter requirements.

Overall, the Committee’s coordinated focus on ICT, crypto‑assets and liquidity underscores an integrated view of risk that recognises the interdependence of technology, market structure and supervisory oversight. Banks that proactively align their risk frameworks with these emerging expectations will likely navigate the regulatory transition more smoothly, while those that delay may encounter heightened supervisory scrutiny and capital costs.