Draft RTS to specify the policy on ICT services supporting critical or important functions
EBA, EIOPA, and ESMA finalize draft Regulatory Technical Standards under DORA to define requirements for financial entities' ICT third-party risk policies, including contractual arrangements, risk assessments, and business continuity for critical or important functions.