EBA, EIOPA, and ESMA FAQ on the 2024 DORA Dry Run exercise clarifies practical aspects of reporting ICT third-party provider registers, including template completion, file submission, and data quality feedback, while excluding legal interpretation of DORA or ITS provisions.
EBA, EIOPA, and ESMA final report on DORA regulatory technical standards outlining requirements for financial entities to assess and manage risks when subcontracting ICT services supporting critical or important functions, including due diligence, monitoring, and contractual conditions under Article 30(5) of Regulation (EU) 2022/2554.
European Banking Authority (EBA) 2024 staffing plan detailing authorized posts, including permanent, temporary, and contract agents, with breakdowns for MiCAR, DORA, and SDFA regulatory tasks under the EU budget.
EBA 2024 Training Programme – offers e-learning and live seminars on MiCA, DORA, Basel III, AML/CFT supervision, recovery planning, SREP, MREL, and supervisory reporting for EU financial regulators and supervisors.
EBA, EIOPA, and ESMA finalize technical standards under DORA for major incident and cyber threat reporting, defining content, templates, timelines, and procedures for financial entities, including streamlined templates and adjusted reporting deadlines.
EBA, EIOPA, and ESMA joint guidelines under DORA for financial entities on estimating and reporting aggregated annual costs and losses from major ICT-related incidents, ensuring harmonization, proportionality, and reduced reporting burden.
European Supervisory Authorities finalize Regulatory Technical Standards under DORA to harmonize oversight conditions for critical ICT third-party service providers, detailing information requirements, subcontracting arrangements, and assessment processes for competent authorities.
EBA, EIOPA, and ESMA finalize regulatory technical standards under DORA to define criteria for composing joint examination teams, ensuring balanced participation of ESA and competent authority staff in ICT third-party service provider oversight.
EBA, EIOPA, and ESMA finalize joint guidelines under DORA to establish cooperation and information exchange procedures between European Supervisory Authorities and competent authorities for consistent oversight of critical ICT third-party service providers, effective January 2025.
European Supervisory Authorities finalize Regulatory Technical Standards under DORA to define criteria, requirements, and methodology for threat-led penetration testing (TLPT), including tester roles, testing phases, and supervisory cooperation, following public consultation feedback.