Adoption of governance, risk and compliance systems still partial
Respondents mention main service providers and plans to upgrade
The proportion of central banks utilising governance, risk and compliance (GRC) systems continues to hover below half, the Risk Management Benchmarks 2025 find.
Only 44.2% of 43 respondents say they use a GRC system. This year’s figure is up from 36.4% in the 2024 benchmark, but similar to the 42.4% figure in 2023. Each benchmark has a somewhat different sample of central banks.
Twenty-four centralised risk management teams and 19 decentralised units provided data on the question. Analysis of
Only users who have a paid subscription or are part of a corporate subscription are able to print or copy content.
To access these options, along with all other subscription benefits, please contact info@centralbanking.com or view our subscription options here: http://subscriptions.centralbanking.com/subscribe
You are currently unable to print this content. Please contact info@centralbanking.com to find out more.
You are currently unable to copy this content. Please contact info@centralbanking.com to find out more.
Copyright Infopro Digital Limited. All rights reserved.
As outlined in our terms and conditions, https://www.infopro-digital.com/terms-and-conditions/subscriptions/ (point 2.4), printing is limited to a single copy.
If you would like to purchase additional rights please email info@centralbanking.com
Copyright Infopro Digital Limited. All rights reserved.
You may share this content using our article tools. As outlined in our terms and conditions, https://www.infopro-digital.com/terms-and-conditions/subscriptions/ (clause 2.4), an Authorised User may only make one copy of the materials for their own personal use. You must also comply with the restrictions in clause 2.5.
If you would like to purchase additional rights please email info@centralbanking.com
More on Risk Management
Privacy and security seen as greatest AI risks
Larger risk teams more likely to provide training to staff on risk types
Most central banks reviewed risk management in past year
Other aspects evaluated varied by risk team structure and departmental staff strength
Cyber and geopolitical risks are managers’ top risks
Geopolitical risks seen rising fastest, but cyber is the biggest concern currently
Risk Management Benchmarks 2025 Charts
Take a deep dive into the Risk Management Benchmarks charts, which have just been released for 2025.
Central banks keep ISO 31000 and COSO-ERM as main approaches
Principles tend to vary slightly by central banks’ risk management philosophies
Central banks typically employ detailed business continuity plans
But institutional risk appetite is less commonly included, especially in Europe
A third of central banks lack key risk indicators
Most of those with KRIs conduct monitoring and employ feedback loops
Direct system breaches are top cyber risk
Main threats vary by cyber security staffing and economic groupings