Search
Consultation paper on Joint draft technical standards on major incident reporting
EBA consultation on draft technical standards under DORA for reporting major incidents and significant cyber threats, defining content, formats, timelines, and procedures for financial entities.
Consultation paper on Joint draft RTS on subcontracting ICT services supporting critical or important functions
European Supervisory Authorities consult on draft regulatory technical standards outlining requirements for financial entities assessing ICT subcontracting of critical or important functions under DORA (Regulation (EU) 2022/2554).
Consultation paper on Joint draft RTS specifying elements related to threat led penetration tests
European Supervisory Authorities (ESAs) consult on draft Regulatory Technical Standards outlining requirements for threat-led penetration tests under DORA, covering methodology, scope, and reporting to strengthen financial sector cyber resilience by March 2024.
Consultation paper on Joint draft Guidelines on estimation of aggregated annual costs and losses caused by major ICT-related incidents
EBA, EIOPA, and ESMA consult on joint guidelines under DORA for financial entities to estimate and report aggregated annual costs and losses from major ICT-related incidents, ensuring harmonisation, proportionality, and consistency with incident classification and reporting standards.