← Back to SION RadarWeekly briefing
Risk, regulation and responsibility for places
Retrospective for 26 August–1 September: the EBA consultation, Montenegro’s legislative process and security in educational institutions. Prepared on 8 September 2026.
EBA: an operational-risk draft, not a new duty effective today
What changed
On 26 August, the EBA opened a consultation on draft technical standards for operational-risk management under CRR3. Comments are due by 31 December 2026.
Editorial interpretation and suggested checks
Why it matters
Our editorial assessment: relevant institutions can use the proposal to review responsibilities, records and reporting. A draft is not a final rule, and the EU banking framework is not automatically a general obligation for every organisation in the region.
What to check
- Record existing requirements, proposed changes and the person monitoring their status separately.
- For one operational loss, trace the cause, risk owner, control, action and management report.
Applicable organizations and jurisdictions
European Union
Sources
Source titles are retained in their original language.
Explore the related example in SION GRCMontenegro: track the version of the proposal, not just the law’s title
What changed
The government statement published on 1 September covers decisions of 31 August on withdrawing earlier amendments and proposing new amendments to the draft personal-data protection law.
Editorial interpretation and suggested checks
Why it matters
Our editorial conclusion: the document version and legal status matter when planning compliance. The statement alone does not establish that the law has been adopted, entered into force or triggered a new implementation deadline.
What to check
- Distinguish current law, draft legislation and amendments in the obligations register; retain the date and source of each version.
- Assign legal counsel or the data-protection function to check the final text and applicability before changing internal procedures.
Applicable organizations and jurisdictions
Montenegro
Sources
Source titles are retained in their original language.
Explore the related example in SION GRCSchool security: connect staffing to the actual location
What changed
On 31 August, RTCG relayed a ministry announcement approving temporary physical security in Montenegrin educational institutions from 1 September until the end of 2026.
Editorial interpretation and suggested checks
Why it matters
Our editorial recommendation: examine such a measure at the level of the building, entrance, shift and responsibility. This is not evidence of a new general duty for every school in the region, nor proof that security staffing alone resolves every risk.
What to check
- Map entrances, sensitive zones, responsible people and the incident-reporting route for a building.
- Check shift handover, who confirms the response and where the identified problem and action taken are recorded.
Applicable organizations and jurisdictions
Montenegro
Sources
Source titles are retained in their original language.
Explore the related example in SION GRCAn informational overview, not individual legal advice. Applicability depends on the organization and jurisdiction; check the original documents before making decisions.
