Managing vendors supporting critical or important functions - from zero to full compliance with DORA
A summary of key practical steps based on the draft technical standard.
EU DORA RTS - third party contractual arrangements - Art 1
Outlines the complexity and risk considerations that need to be taken under consideration in a written policy covering services supporting the financial institution's critical or important functions that are provided by third parties.
Overview
Rules in This Collection
Notable
Latest News
Further Reading
Notable
Your DORA questions answered – Extraterritoriality and interaction with existing rules
This last of a series of six articles covering a practical session organised by Ashurst focuses on how DORA will interact with existing rules as well as its extraterritorial effects.
Your DORA questions answered – ICT services in scope
This second of a series of six articles covering a practical session organised by Ashurst focuses on the ICT services in scope of DORA.
Latest News
More on DORA
-
Counting down to DORA compliance
Developments include: potential standardization of threat-led penetration testing, new oversight director for DORA and ESA's work program.
-
DORA implementation guidance published by BaFin
Although non-mandatory and applicable to regulated entities in Germany the practical guidance offers helpful insight into key aspects of the new regime.
-
Navigating cybersecurity compliance: NIS2 UK/US stakeholder impact
Increasing reliance on digital platforms and a growing threat from bad actors means regulators are giving more attention to cybersecurity compliance.
-
Could the Ashley Madison data breach happen today?
The mass data breach of the infamous Ashley Madison website offers insight into data privacy and cybersecurity.
-
Lessons on resilience as tech outage creates global disruption
A faulty code resulted in one of the most widespread tech outages in recent years for companies using Windows.
-
Three key DORA supporting technical standards now in force
The RTSs focus on ICT-incident reporting, ICT risk management and contractual relationships with third-parties supporting critical or important functions
-
Preparing for DORA: Mind the gap
How mandatory contract provisions under DORA map to existing regulatory regimes in respect of outsourcing arrangements and highlighting some of the gaps.
-
Compliance & Conversation: Preparing for DORA implementation
Ashurst Partner Bradley Rice addressed some of the key practical challenges of DORA at Global Relay’s gathering of compliance professionals.
Further Reading
