The ECB has published its Supervisory Priorities for 2026–2028, setting out a two-pillar agenda focused on strengthening banks’ resilience to geopolitical and macro-financial risks and enhancing operational and ICT capabilities. The priorities highlight stricter scrutiny of credit underwriting, the implementation of CRR III/CRD VI, and intensified supervisory work on climate and nature-related risks. The ECB will also deepen its oversight of ICT and cybersecurity under DORA, address persistent deficiencies in risk-data aggregation and reporting, and establish a multi-year supervisory approach to the use of AI in banking. These themes outline the supervisory expectations that will shape the next SREP cycles and the medium-term prudential framework in the Banking Union.