DORA regulation outlining process for identifying critical ICT third-parties published
It implements the specific assessment approach to be used by supervisory authorities and outlines fees payable by vendors designated as critical.
EU DORA Del Reg - CTPP designation criteria
Sets out the critera to be used to assess whether an ICT third-party service provider is critical for financial entities. Utilizes a two-step test to identify those providers who are most critical.
Overview
Notable
Latest News
Notable
Your DORA questions answered – CIFs
This third of a series of six articles covering a practical session organised by Ashurst focuses on critical or important functions.
Managing vendors supporting critical or important functions - from zero to full compliance with DORA
A summary of key practical steps based on the draft technical standard.
Latest News
More on DORA
-
ESAs make progress on critical ICT third-party oversight framework
ICT providers designated critical under DORA will get six weeks to challenge the designation.
-
EBA narrows existing ICT guidelines
DORA ICT risk management requirements apply to financial entities in their place.
-
Why tech, process and people are top of mind for CISO Laurence Lafond
In this second part of our discussion with Lafond, he refers to internal threats, side-channel attacks, vendor risks and having a well-equipped incident response plan and team.
-
DORA: Navigating the path ahead
With DORA now in effect, the EU’s financial sector is entering a new phase of operational resilience obligations, where firms must shift from preparation to action.
-
Facing up to the challenge as the age of DORA dawns
The absence of a transitional period presents a challenge for firms and third parties.
-
XLOD London 2024: What’s next for operational resilience?
Experts from Morgan Stanley, BNY, Nomura and First Abu Dhabi Bank discussed this key issue at the leading compliance industry event.
-
1LoD report points to key regulatory trends in 2025
Regulatory preparedness, resilience and evolving challenges among the topics covered in an insightful and data-rich document.
-
Counting down to DORA compliance
Developments include: potential standardization of threat-led penetration testing, new oversight director for DORA and ESA's work program.