lexiara

(a)

Directive (EU) 2025/2 of the European Parliament and of the Council of 27 November 2024 amending Directive 2009/138/EC as regards proportionality, quality of supervision, reporting, long-term guarantee measures, macro-prudential tools, sustainability risks and group and cross-border supervision, and amending Directives 2002/87/EC and 2013/34/EU (Text with EEA relevance) · European Union

paragraph 2 is amended as follows: point (e) is replaced by the following: (*8) Regulation (EU) 2019/881 of the European Parliament and of the Council of 17 April 2019 on ENISA (the European Union Agency for Cybersecurity) and on information and communications technology cybersecurity certification and repealing Regulation (EU) No 526/2013 (Cybersecurity Act) (OJ L 151, 7.6.2019, p. 15).’;" operational risk management, including cybersecurity as defined in Article 2, point (1), of Regulation (EU) 2019/881 of the European Parliament and of the Council (*8); the following subparagraphs are added: ‘Where insurance or reinsurance undertakings apply the volatility adjustment referred to in Article 77d, their liquidity plans shall take into account the use of the volatility adjustment and assess whether liquidity constraints may arise which are not consistent with the use of the volatility adjustment. Insurance and reinsurance undertakings shall take into account the short-, medium- and long-term horizon when assessing sustainability risks. For the purposes of the assessment referred to in the fifth subparagraph, the supervisory authorities shall ensure that undertakings, as part of their risk management, have strategies, policies, processes and systems for the identification, measurement, management and monitoring of sustainability risks over the short, medium and long term.’;

· All articles ·

Source: EUR-Lex (Cellar) · retrieved 2026-10-14 · Text as adopted (Official Journal); later amendments are not incorporated in this text.