EBA, EIOPA, and ESMA workshop on 10 June 2024 presenting DORA dry run tools for financial entities, covering data collection templates, file preparation, and reporting guidance for registers of information.
European Supervisory Authorities (EBA, EIOPA, ESMA) and ENISA establish a cooperation framework under DORA and NIS2 Directive to enhance cybersecurity, incident reporting, technical standards, and cross-sector collaboration in the EU financial sector.
EBA guidance on using the Excel template and VBA-based CSV generator tool for financial entities to report the DORA Register of Information during the 2024 voluntary dry run exercise, including system settings and optional reporting assistance.
EBA, EIOPA, and ESMA conduct a 2024 dry run to help financial entities prepare their ICT third-party provider registers under DORA, due by January 2025, offering feedback, data quality checks, and reporting process testing.
The European Supervisory Authorities (EBA, EIOPA and ESMA – the ESAs) today announced that they will launch in May the voluntary exercise for the collection of the registers of information of contractual arrangements on the use of ICT third-party service providers by the financial entities. Under the Digital Operation Resilience Act (DORA) and starting from 2025, financial entities will have to maintain registers of information regarding their use of ICT third-party providers. In this dry run exercise, this information will be collected from financial entities through their competent authorities and will serve as preparation for the implementation and reporting of registers of information under DORA.
EBA, EIOPA, and ESMA finalize draft Regulatory Technical Standards under DORA to harmonize ICT risk management tools, processes, and policies, including a simplified framework for certain financial entities, addressing proportionality, encryption, access control, and third-party ICT services.
EBA, EIOPA, and ESMA finalize draft Regulatory Technical Standards under DORA to define requirements for financial entities' ICT third-party risk policies, including contractual arrangements, risk assessments, and business continuity for critical or important functions.
EBA, EIOPA, and ESMA finalize draft Regulatory Technical Standards under DORA, defining criteria for classifying ICT-related incidents, materiality thresholds for major incidents, and significant cyber threats, with proportionality adjustments following public consultation.
European Supervisory Authorities finalize draft Implementing Technical Standards for standardized templates under DORA, defining the register of ICT third-party service provider contractual arrangements to enhance digital operational resilience in the EU financial sector.
The three European Supervisory Authorities (EBA, EIOPA and ESMA – the ESAs) published today the first set of final draft technical standards under the Digital Operational Resilience Act (DORA) aimed at enhancing the digital operational resilience of the EU financial sector by strengthening financial entities’ Information and Communication Technology (ICT) and third-party risk management and incident reporting frameworks.