EBA, EIOPA, and ESMA finalize draft Regulatory Technical Standards under DORA to harmonize ICT risk management tools, processes, and policies, including a simplified framework for certain financial entities, addressing proportionality, encryption, access control, and third-party ICT services.
EBA, EIOPA, and ESMA finalize draft Regulatory Technical Standards under DORA to define requirements for financial entities' ICT third-party risk policies, including contractual arrangements, risk assessments, and business continuity for critical or important functions.
EBA, EIOPA, and ESMA finalize draft Regulatory Technical Standards under DORA, defining criteria for classifying ICT-related incidents, materiality thresholds for major incidents, and significant cyber threats, with proportionality adjustments following public consultation.
European Supervisory Authorities finalize draft Implementing Technical Standards for standardized templates under DORA, defining the register of ICT third-party service provider contractual arrangements to enhance digital operational resilience in the EU financial sector.