(i)

Directive (EU) 2025/2 of the European Parliament and of the Council of 27 November 2024 amending Directive 2009/138/EC as regards proportionality, quality of supervision, reporting, long-term guarantee measures, macro-prudential tools, sustainability risks and group and cross-border supervision, and amending Directives 2002/87/EC and 2013/34/EU (Text with EEA relevance) · European Union

point (e) is replaced by the following: (*8) Regulation (EU) 2019/881 of the European Parliament and of the Council of 17 April 2019 on ENISA (the European Union Agency for Cybersecurity) and on information and communications technology cybersecurity certification and repealing Regulation (EU) No 526/2013 (Cybersecurity Act) (OJ L 151, 7.6.2019, p. 15).’;" operational risk management, including cybersecurity as defined in Article 2, point (1), of Regulation (EU) 2019/881 of the European Parliament and of the Council (*8);

← (a) · All articles · ‘(e) →

Source: EUR-Lex (Cellar) · retrieved 2026-10-14 · Text as adopted (Official Journal); later amendments are not incorporated in this text.