European Supervisory Authorities (ESAs) consult on draft Regulatory Technical Standards outlining requirements for threat-led penetration tests under DORA, covering methodology, scope, and reporting to strengthen financial sector cyber resilience by March 2024.
European Supervisory Authorities (ESAs) consult on draft joint guidelines for oversight cooperation and information exchange with competent authorities under Regulation (EU) 2022/2554, aiming to strengthen supervisory coordination and transparency by March 2024.
EBA consultation on draft technical standards under DORA for reporting major incidents and significant cyber threats, defining content, formats, timelines, and procedures for financial entities.
EBA and ESAs consult on draft regulatory technical standards to harmonise conditions for oversight activities under Regulation (EU) 2022/2554, covering requirements for effective supervision and stakeholder feedback until March 2024.
EBA, EIOPA, and ESMA consult on joint guidelines under DORA for financial entities to estimate and report aggregated annual costs and losses from major ICT-related incidents, ensuring harmonisation, proportionality, and consistency with incident classification and reporting standards.
European Supervisory Authorities consult on draft regulatory technical standards outlining requirements for financial entities assessing ICT subcontracting of critical or important functions under DORA (Regulation (EU) 2022/2554).
ESAs response to European Commission's request for technical advice on designation criteria and fees for the DORA oversight framework
ESAs Report on the landscape of ICT third-party providers in the EU
Joint ESAs Discussion paper on DORA - criteria for critical ICT third-party service providers (CTPPs) and oversight fees
European Commission requests advice from ESMA, EIOPA, and EBA on designation criteria and fee structures for critical ICT third-party service providers under the Digital Operational Resilience Act (DORA) framework.