• 82% of European Chief Risk Officers (CROs) believe cybersecurity presents the biggest risk to their business in 2024
• 71% of European CROs are concerned specifically about cyber warfare between nation-states as geopolitics remain heightened
• Over a five-year time horizon, the leading emerging risks for banking CROs are climate (76%), machine learning and AI (53%) and IT legacy system (47%)
For the second consecutive year, the EY and Institute of International Finance (IIF) Bank Risk Management Survey finds that cybersecurity is the top concern for European banking Chief Risk Officers (CROs).
The survey, which uses sentiment data from 17 large European banks, finds that 82% of European CROs rank cybersecurity risk as the biggest threat to their business over the next 12 months (relative to 73% globally), and 71% believe cyber warfare between nation-states is becoming an increasingly real threat.
The challenging geopolitical environment is also leading to European banking CROs voicing concerns about global sanctions and operational resilience, and 82% of respondents believe geopolitical risks will increase this year.
Gelu Gherghescu, Markets leader, EY Romania, comments: “Geopolitical tensions, anticipation of election outcomes, continued war in Europe, and increasing unrest in the Middle East are adding volatility to an already challenging economic environment. It is not surprising therefore that so many CROs are identifying cyber as the biggest risk once more this year.
Other insights of the survey show that the CRO job description has become uniquely multi-faceted, CROs having to play several roles in the organization in identifying risks comprehensively, managing them effectively, and reporting on them efficiently.”
“The most effective way to guard against cyber threats is by continuously boosting operational resilience. Here, the EU's Digital Operational Resilience Act (DORA) plays a crucial role, enabling firms to reduce interruptions, adapt to progressively intricate risks, and promote heightened stability and security internally”, says Catalina Dodu, Consulting leader, EY Romania, and Cybersecurity Leader EY South Cluster.
Climate is the biggest emerging risk for Europe’s banks
When asked about material risks over a five-year period, almost three quarters (76%) of European banking CROs believe climate risk presents the biggest emerging threat to operations, relative to 56% globally. While still a top-five issue, a smaller 53% of respondents say they have concerns about AI and machine learning risks and 47% about IT legacy systems risks.
European banking CROs consider climate change to present such a level of risk that over half (59%) of respondents believe it requires the direct attention of the board.
The multiple aspects of short-term climate risks in banking, such as short-term reporting imperatives, are yet to be discovered by CROs. Overall, the survey results show that risk managers recognize the urgent need for better understanding and action on climate risks and increased efforts to close these gaps.
***
About EY Romania
EY is one of the world's leading professional services firms with 395,442 employees in more than 700 offices across 150 countries, and revenues of approx. $49.4 billion in the financial year that ended on 30 June 2023. Our network is the most integrated worldwide, and its resources help us provide our clients with services allowing them to take advantage of opportunities anywhere in the world.
With a presence in Romania ever since 1992, EY provides, through its more than 900 employees in Romania and the Republic of Moldova, integrated services in assurance, tax, strategy and transactions, and consulting to clients ranging from multinationals to local companies.
Our offices are based in Bucharest, Cluj-Napoca, Timisoara, Iasi and Chisinau. In 2014, EY Romania joined the only global competition dedicated to entrepreneurship, EY Entrepreneur Of The Year. The winner of the national award represents Romania at the world final taking place every year in June, at Monte Carlo. The title of World Entrepreneur Of The Year is awarded in the world final. For more information, please visit: www.ey.com
About the study
The global EY organization, in conjunction with the IIF, surveyed IIF member firms and other banks in each region globally (including a small number of material subsidiaries that are top-five banks in their home countries) from June 2023 through October 2023.
Participating banks’ CROs or other senior risk executives were interviewed, completed a survey, or both. In total, 85 financial institutions across 30 countries participated. Participating banks were fairly diverse in terms of asset size, geographic reach and type of bank. Regionally, those banks were headquartered in Asia-Pacific (14%), Europe (20%), Latin America (14%), Middle East and Africa (18%) and North America (34%). Of those, 12% are globally systemically important banks (G-SIBs).
