EBA, EIOPA, and ESMA final report on DORA regulatory technical standards outlining requirements for financial entities to assess and manage risks when subcontracting ICT services supporting critical or important functions, including due diligence, monitoring, and contractual conditions under Article 30(5) of Regulation (EU) 2022/2554.
EBA, EIOPA, and ESMA workshop summarizing key lessons and data quality findings from the 2024 DORA dry run exercise, outlining preparations for 2025 official reporting of information registers under the Digital Operational Resilience Act.
EBA open call for experts under DORA Joint Oversight Venture (JOV) outlining required profiles – DORA JET Lead, JET Expert, and Data Analyst – and their key responsibilities in overseeing critical ICT third-party providers to ensure operational resilience and financial stability in the EU.
Presentation
Joint ESAs presentation
Joint Stakeholders Groups' response to Consultation on draft ITS on register of information
European Supervisory Authorities (ESAs) report on the 2024 DORA dry run exercise, summarizing findings on financial entities' registers of ICT third-party service provider contracts, data quality checks, and recommendations for compliance with Digital Operational Resilience Act requirements.
EBA, ESMA, and EIOPA joint data protection notice for recruiting DORA experts – outlines personal data processing, controllers, processors, and retention under EUDPR for temporary agents, contract staff, and seconded national experts.
Joint Stakeholders Groups' response to Consultation on draft RTS on classification of ICT incidents
Joint Stakeholders Groups' response to Consultation on draft RTS on policy on the use of ICT services regarding CI functions
Joint Stakeholders Groups' response to Consultation on draft RTSs ICT risk management tools methods processes and policies
European Banking Authority organisational chart for March 2026 – outlines leadership structure, key departments including Prudential Regulation, Digital Finance, ESG Risks, and DORA oversight, and senior management roles.
EBA final report amending ICT and security risk management guidelines to align with DORA, clarifying scope for payment service providers not covered by DORA while harmonizing ICT risk frameworks under PSD2 and CRD.
EBA outlines efforts to simplify the EU banking regulatory and supervisory framework, focusing on reducing complexity, streamlining reporting, and enhancing proportionality for small and non-complex institutions (SNCI) while maintaining financial stability under Basel 3 and DORA.
EBA Management Board minutes from January 2026 covering approval of 2025 management report, budget execution, IT strategy, DORA and MiCA implementation, HR and wellbeing initiatives, and discussions on efficiency recommendations and building project plans.
EBA outlines efforts to simplify the EU banking regulatory and supervisory framework, focusing on reducing complexity, streamlining reporting, and applying proportionality for small and non-complex institutions (SNCIs) while maintaining financial stability under Basel III and DORA.
European Banking Authority (EBA) Board of Supervisors meeting minutes from January 2026 covering discussions on DORA critical third-party providers (CTPP) designation, suitability assessments for financial institutions, AML/CFT transition to AMLA, Banking Package updates, and EBA’s 2025 performance and compliance framework.
EBA organisational chart as of 1 February 2026 – outlines leadership, departments, and key teams including prudential regulation, digital finance, risk analysis, DORA oversight, and ESG risks under the updated governance structure.