Directive 2013/36/EU of the European Parliament and of the… Article 85

Operational risk

Article 85

1. Competent authorities shall ensure that institutions implement policies and processes to evaluate and manage the exposure to operational risk, including model risk, and to cover low-frequency high-severity events. Institutions shall articulate what constitutes operational risk for the purposes of those policies and procedures. 2. Competent authorities shall ensure that contingency and business continuity plans are in place to ensure an institution's ability to operate on an ongoing basis and limit losses in the event of severe business disruption.

Read the full instrument → · Read this in context: Sub-Section 2 — Technical criteria concerning the organisation and treatment of risks →

Other provisions in Sub-Section 2 — Technical criteria concerning the organisation and treatment of risks

Compiled from an official source version. Later amendments or repeals may not be reflected; the official text prevails. · Read the official text ↗ · Data as of 2026-07-04

CitationArticle 85 of Directive 2013/36/EU of the European Parliament and of the… (LawPlayer, data as of 2026-07-04)

What to look at next

Directive 2013/36/EU of the European Parliament and of the…, full textChapter navigation and full text, so you can read this section in contextEuropean Union legislation EU Legal Acts by type and yearGrouped by instrument type and year of enactment, so you can find others of the same kindBrowse by type and year Sub-Section 2 — Technical criteria concerning the organisation and treatment of risks — read this in contextThe surrounding text of the act in order, so you can see what comes before and afterChapters and sections