The Basel Committee for Banking Supervision convened in Indonesia on September 28–29, 2026, to progress several key regulatory and supervisory initiatives. A central focus was the ongoing review of the prudential standard for banks’ exposures to cryptoassets, with the Committee expecting to provide an update by the end of the year. Additionally, the body approved a final standard for machine-readable Pillar 3 disclosures to replace current PDF-only formats, aiming to improve data aggregation and market discipline. This standard is scheduled for publication around the end of the year.
The meeting also addressed emerging risks from artificial intelligence, noting that while frontier AI offers efficiency gains, it amplifies operational vulnerabilities such as cyber attacks and correlated dependencies. Consequently, the Committee agreed to review the sufficiency of existing "event type" loss categories within its operational risk framework, specifically focusing on cyber risk and AI developments. Other approvals included revisions to the Global Systemically Important Banks (G-SIBs) assessment framework to reduce window-dressing behavior, results of the end-2025 G-SIB assessment exercise, and jurisdictional reports on leverage ratio implementation in six major economies. The Committee also announced upcoming consultations on interest rate risk in the banking book (IRRBB) guidance and cross-border exposures within the European banking union.
The simultaneous advancement of cryptoasset prudential reviews and machine-readable disclosure standards signals a dual push toward modernizing legacy frameworks while enhancing data transparency. By moving Pillar 3 disclosures away from static PDFs, the Committee addresses a critical bottleneck in market discipline, allowing external stakeholders to more effectively compare bank risk profiles. This structural change complements the targeted review of crypto exposures, suggesting that regulators are preparing for a future where digital asset integration requires both precise capital treatment and accessible, standardized reporting mechanisms to maintain systemic stability.
From an operational risk perspective, the explicit linkage between AI developments and the revision of loss event categories highlights growing concern over non-financial risks in the digital age. As financial institutions increasingly integrate AI into critical functions, the potential for correlated failures and cyber vulnerabilities expands beyond traditional boundaries. The Committee’s decision to monitor these developments closely, alongside the introduction of voluntary supervisory tools for credit risk and governance, indicates a shift toward more adaptive, institution-specific oversight rather than one-size-fits-all mandates, aiming to balance innovation with robust risk management.
