DORA regulation outlining process for identifying critical ICT third-parties published
It implements the specific assessment approach to be used by supervisory authorities and outlines fees payable by vendors designated as critical.
Your DORA questions answered – CIFs
This third of a series of six articles covering a practical session organised by Ashurst focuses on critical or important functions.
Managing vendors supporting critical or important functions – from zero to full compliance with DORA
A summary of key practical steps based on the draft technical standard.
This article is the first of a three-part series exploring the increasingly complex operational resilience landscape across the EU.
The incident offers a concrete scenario against which organizations can stress-test their existing programs: three steps to consider.
A new supervisory review highlights incident learning and ICT risk management among key gaps in DORA compliance.
As advances in AI change the cyber risk landscape, Finanstilsynet lists measures for firms to increase preparedness and strengthen governance.
Research reveals vulnerability in legacy telecoms standards that is being overlooked by finance firms.
Discussion on this panel at XLOD Global centered on interpreting and implementing evolving expectations on non-financial risk.
New course aims to help SMEs remain compliant in a complex regulatory landscape.
The Action Plan does not create new legal obligations but sets out steps for operationalizing the AI Act, NIS2, DORA, and the Cyber Resilience Act.
