The currently seventh, version of the Minimum Requirements for Risk Management (MaRisk) was published on 16 August 2021. A special focus was placed on the transposition of the guidelines of the European Banking Authority (EBA) on management of non-performing and forborne exposures as well as on outsourcing into German supervisory practice. In addition, individual requirements from the EBA guidelines on the management of ICT and security risk management, i.e. information and communication technology, were included.