According to the Basel Committee on Banking Supervision (BCBS), ICT refers to the underlying physical and logical design of information technology and communication systems, the individual hardware and software components, data, and the operating environments. ICT risk includes technology failure, cyber risk, and data privacy risk.