The FSAP reviewed the supervision and oversight of cyber risk and operational resilience of Significant Banking Institutions (SIs) in the Single Supervisory Mechanism (SSM) and the Financial Market Infrastructures (FMIs) operated by the Eurosystem. From an institutional perspective, the review included the ECB’s relevant organizational units in the ECB Banking Supervision, Directorate General Market Infrastructure and Payments (DG-MIP), and the European Supervisory Authorities’ (ESA) joint Directorate in charge for Digital Operational Resilience Act (DORA) oversight; jointly referred to as ‘authorities’.