Risk reporting, cyber and third-party risk management
Participants will explore effective risk governance models, compare supervisory approaches, and examine real-world case studies from different regulatory institutions.
Risk reporting, cyber and third-party risk management
18th November 2025
2:00pm - 6:15pm GMT
9:00am - 1:15pm EST
Speakers

Klaus Löber
Chair, CCP supervisory committee
European Securities and Markets Authority (ESMA)
Klaus Löber is the Chair of the CCP Supervisory Committee (CCP SC) in ESMA, which was established in 2020. His areas of responsibility encompass the tasks attributed by the European Market Infrastructure Regulation (EMIR) to the CCP SC, in particular the enhanced supervisory convergence towards EU CCPs and ensuring a resilient CCP landscape in the EU as well the monitoring and supervision of CCPs established in third countries in view of the risks that they may pose to the EU financial system. He is also chairing the ESMA CCP Policy Committee contributing to the EU Single Rule Book in the area of CCPs.
Prior to this role, Mr Löber was the Head of the Oversight Division of the European Central Bank in charge of the oversight of financial market infrastructures, payments instruments and schemes. Earlier positions include the Head of the Secretariat of the Committee on Payments and Market Infrastructures, the global standard setting body in the area of payments, clearing and settlement as well as positions in the European Commission, Deutsche Bundesbank and private practice.
Mr Löber regularly publishes on financial markets legal, regulatory and infrastructure issues and lectures at universities.

Sukhvir Notra
Senior information security specialist
Bank for International Settlements
Mr. Sukhvir Notra is a Senior Information Security Specialist at the Bank for International Settlements (BIS). He has been an information security professional for over 10 years with majority of his career focused on defensive cyber operations. At the Cyber Resilience Coordination Centre (BIS), Sukhvir is responsible for development and delivery of cyber range exercises, managing cyber resilience assessments of central banks and other projects aimed at strengthening cyber resilience and promoting collaboration in the central bank community. His primary interest include leadership, operations, information security readiness and risk management. He has a Bachelors of Electrical Engineering degree and a Masters of Cyber Security from University of New South Wales.
Agenda
14:00 – 14:10
Course welcome and introduction
14:00 - 16:10
Klaus Löber is the Chair of the CCP Supervisory Committee (CCP SC) in ESMA, which was established in 2020. His areas of responsibility encompass the tasks attributed by the European Market Infrastructure Regulation (EMIR) to the CCP SC, in particular the enhanced supervisory convergence towards EU CCPs and ensuring a resilient CCP landscape in the EU as well the monitoring and supervision of CCPs established in third countries in view of the risks that they may pose to the EU financial system. He is also chairing the ESMA CCP Policy Committee contributing to the EU Single Rule Book in the area of CCPs.
Prior to this role, Mr Löber was the Head of the Oversight Division of the European Central Bank in charge of the oversight of financial market infrastructures, payments instruments and schemes. Earlier positions include the Head of the Secretariat of the Committee on Payments and Market Infrastructures, the global standard setting body in the area of payments, clearing and settlement as well as positions in the European Commission, Deutsche Bundesbank and private practice.
Mr Löber regularly publishes on financial markets legal, regulatory and infrastructure issues and lectures at universities.
14:10 – 14:40
Current risks and challenges facing central banks in 2025
14:10 - 14:40
- Geopolitics
- Climate
- Quantum cyber threats
- AI governance
Klaus Löber is the Chair of the CCP Supervisory Committee (CCP SC) in ESMA, which was established in 2020. His areas of responsibility encompass the tasks attributed by the European Market Infrastructure Regulation (EMIR) to the CCP SC, in particular the enhanced supervisory convergence towards EU CCPs and ensuring a resilient CCP landscape in the EU as well the monitoring and supervision of CCPs established in third countries in view of the risks that they may pose to the EU financial system. He is also chairing the ESMA CCP Policy Committee contributing to the EU Single Rule Book in the area of CCPs.
Prior to this role, Mr Löber was the Head of the Oversight Division of the European Central Bank in charge of the oversight of financial market infrastructures, payments instruments and schemes. Earlier positions include the Head of the Secretariat of the Committee on Payments and Market Infrastructures, the global standard setting body in the area of payments, clearing and settlement as well as positions in the European Commission, Deutsche Bundesbank and private practice.
Mr Löber regularly publishes on financial markets legal, regulatory and infrastructure issues and lectures at universities.
14:40 – 14:10
Understanding risk management functions in central banks
14:40 - 15:10
- Risk governance
- Compliance, oversight and internal vs external risks
- Case study comparisons between mature and developing risk management divisions
15:10 – 15:55
Supervisory reporting frameworks: Operational risk and strategic expectations
15:10 - 15:55
- Supervisory expectations for capital, liquidity, and operational risk reporting for systemically important banks (SIBs)
- Highlight operational risk in the reporting process and maintaining data integrity and strong governance
- Compare mature and emerging supervisory tactics
15:55 – 16:25
Break
12:45 - 13:00
16:25 – 17:10
Cyber and technology risks and resilience
16:25 - 17:10
- Deepfakes, malware and quantum risks
- Testing, detection and response
Mr. Sukhvir Notra is a Senior Information Security Specialist at the Bank for International Settlements (BIS). He has been an information security professional for over 10 years with majority of his career focused on defensive cyber operations. At the Cyber Resilience Coordination Centre (BIS), Sukhvir is responsible for development and delivery of cyber range exercises, managing cyber resilience assessments of central banks and other projects aimed at strengthening cyber resilience and promoting collaboration in the central bank community. His primary interest include leadership, operations, information security readiness and risk management. He has a Bachelors of Electrical Engineering degree and a Masters of Cyber Security from University of New South Wales.
17:10 – 17:55
Managing third-party risk in a high-stake environment
17:10 - 17:55
- Emerging threats from supply chain attacks
- Real world consequences of data breaches
- Best practices for onboarding and due diligence
- Continuous monitoring strategies
17:55 – 18:10
Tutor closing discussion
17:55 - 18:10
Klaus Löber is the Chair of the CCP Supervisory Committee (CCP SC) in ESMA, which was established in 2020. His areas of responsibility encompass the tasks attributed by the European Market Infrastructure Regulation (EMIR) to the CCP SC, in particular the enhanced supervisory convergence towards EU CCPs and ensuring a resilient CCP landscape in the EU as well the monitoring and supervision of CCPs established in third countries in view of the risks that they may pose to the EU financial system. He is also chairing the ESMA CCP Policy Committee contributing to the EU Single Rule Book in the area of CCPs.
Prior to this role, Mr Löber was the Head of the Oversight Division of the European Central Bank in charge of the oversight of financial market infrastructures, payments instruments and schemes. Earlier positions include the Head of the Secretariat of the Committee on Payments and Market Infrastructures, the global standard setting body in the area of payments, clearing and settlement as well as positions in the European Commission, Deutsche Bundesbank and private practice.
Mr Löber regularly publishes on financial markets legal, regulatory and infrastructure issues and lectures at universities.
Learning outcomes
- Identify key risks impacting central banks in 2025
- Learn to compare internal risk governance models and structures
- Assess cyber threats and build-up institutional resilience
- Understand how to manage third-party risk
- Apply practical tools to strengthen your risk management strategy