Search
4 results
Final report on amending Guidelines on ICT risk and security management
EBA final report amending ICT and security risk management guidelines to align with DORA, clarifying scope for payment service providers not covered by DORA while harmonizing ICT risk frameworks under PSD2 and CRD.
Joint Guidelines on the estimation of aggregated costs/losses caused by major ICT-related incidents
EBA, EIOPA, and ESMA joint guidelines under DORA for financial entities on estimating and reporting aggregated annual costs and losses from major ICT-related incidents, ensuring harmonization, proportionality, and reduced reporting burden.
Joint Guidelines on oversight cooperation
EBA, EIOPA, and ESMA finalize joint guidelines under DORA to establish cooperation and information exchange procedures between European Supervisory Authorities and competent authorities for consistent oversight of critical ICT third-party service providers, effective January 2025.