Search

26412 results

DORA188 - 3200 - Definition of appropriate information security standards and highest quality information security standards

Question ID
DORA188 - 3200
Receiving ESA
EIOPA
URL
https://www.eiopa.europa.eu/qa-regulation/questions-and-answers-database/dora18…
Final publishing date
Question

What are the standards Article 28(5) is referring to?

Topic
ICT third-party risk management
Subject matter
Definition of appropriate information security standards and highest quality information security standards

DORA187 - 3199 - Register of Information - out-of-scope financial entity

Question ID
DORA187 - 3199
Receiving ESA
EIOPA
URL
https://www.eiopa.europa.eu/qa-regulation/questions-and-answers-database/dora18…
Final publishing date
Question

- Is the list of the type of ICT services in Annex III of the draft Implementing Technical Standards on the standard templates for the purposes of the register of information in relation to all contractual arrangements on the use of ICT services provided by ICT third-party service providers an exhaustive list? 

- Can an out-of-scope financial entity – such as a micro or SME insurance intermediary - be considered as an ICT third party provider if they provide ICT services that are described in the Annex III of the ESA ITS on information register, to an in scope financial entity - such as an insurer? 

- Can an out-of-scope financial entity – such as a micro or SME insurance intermediary - be considered as an ICT third party provider if they provide ICT services that are NOT described in the Annex III of the ESA ITS on information register, to an in scope financial entity - such as an insurer?

Topic
Register of information (DORA)
Subject matter
Register of Information - out-of-scope financial entity
News 8 August 2025

The EBA publishes statement confirming its response to the new European Commission’s Delegated Act postponing the market risk framework in the EU

Following the European Commission's adoption of a Delegated Act postponing application of the revised market risk framework in the EU, the so-called Fundamental Review of the Trading Book (FRTB), the European Banking Authority (EBA) today confirmed that its no action letter published on 12 August 2024 would remain fully valid and in place. In addition, the EBA’s considerations on specific issues arising from the FRTB postponement would also remain valid and applicable during the extended postponement period.

Press Release 8 August 2025

The EBA amends technical standards specifying the data collection for the 2026 benchmarking exercise

The European Banking Authority (EBA) today published its final draft Implementing Technical Standards (ITS), amending the Implementing Regulation on the benchmarking of credit and market risk for the 2026 exercise. The most significant change is in the area of market risk, where the EBA is proposing to restrict the data collection to the information on the alternative standardised approach (ASA) to be provided by those banks that were granted the internal model approval. In the area of credit risk, the EBA is suggesting only minor changes.

News 7 August 2025

The EBA consults on revised Guidelines on internal governance

The European Banking Authority (EBA) today launched a consultation on its revised Guidelines on internal governance under the Capital Requirements Directive (CRD). The proposed revisions reflect the changes introduced in the CRD framework as well as in other relevant legislations, such as the Digital Operational Resilience Acts (DORA). The consultation runs until 7 November 2025 and is limited to the proposed changes.

Press Release 6 August 2025

The EBA publishes its final draft technical standards on the equivalent legal mechanism for unfinished property exposures under the Standardised Approach for credit risk

The European Banking Authority (EBA) today published its final Regulatory Technical Standards (RTS) specifying what constitutes an “equivalent legal mechanism” for unfinished property exposures under the Capital Requirements Regulation (CRR). These RTS are part of the first phase of the EBA’s roadmap for implementing the EU Banking Package and take into account the stakeholders’ feedback, including targeted amendments to ensure both prudential soundness and practical applicability across the EU.

Press Release 6 August 2025

The EBA issues a no-action letter on the application of ESG disclosure requirements and updates the EBA ESG risks dashboard with December 2024 data

The European Banking Authority (EBA) today published a no-action letter on the application of the ESG Pillar 3 disclosure requirements under the EBA disclosure Implementing Technical Standards (ITS). This no-action letter aims to address legal and operational uncertainties linked to the evolving ESG disclosure framework, in light of the proposed amendments under the European Commission’s Omnibus legislative package on sustainability reporting. The EBA is also updating its ESG risk dashboard.

News 5 August 2025

The EBA consults to simplify and streamline its technical standards on resolution plans and on the functioning of resolution colleges

The European Banking Authority (EBA) launched today a public consultation to amend the Regulatory Technical Standards (RTS) on resolution plans and the RTS on resolution colleges. These revisions target both the structure and content of resolution plans as well as the operational functioning of resolution colleges for cross-border groups. The aim is to simplify and streamline resolution plans and the functioning of resolution colleges and strengthen cooperation among college authorities. The consultation runs until 5 November 2025.