DORA
RTS ICT Risk Management RTS ICT Incident classification RTS Third Party ICT service policy ITS Register of Information RTS Harmonization of conditions
enabling the conduct of oversight activities RTS Joint examination teams RTS & ITS Major incident reporting RTS Subcontracting ICT services RTS Threat-led penetration testing GUIDELINES Estimation of aggregated
annual costs and losses GUIDELINES Oversight cooperation
and information exchange

GUIDELINES Oversight cooperation and information exchange JC2024-36

Overview

This is the regulatory technical standard (RTS) on oversight cooperation and information exchange, supplementing DORA, using the final draft available from the European Banking Authority (EBA) as source. It was submitted by the ESAs to the European Commission in July 2024 as mandated by Article 32(7) of DORA. It became applicable on 17 January 2025 along with DORA.

The RTS oversight cooperation and information exchange outlines guidelines for enhancing cooperation and information exchange between ESAs and CAs within the pan-European oversight framework established by Regulation (EU) 2022/2554 (DORA). Mandated under Article 32(7) of DORA, these guidelines aim to ensure consistent supervisory practices and minimize duplications in oversight activities regarding ICT third-party service providers designated as critical (CTPPs). The draft covers various aspects, including general considerations, designation of CTPPs, oversight activities, follow-up of recommendations, and final provisions.

This text is provided as-is and should not be relied upon as an authoritative source. Instead, consult the Official Journal for the authoritative version once published.
We are not aware of any material differences between the draft and authoritative versions but will ensure to update these pages to reflect the authoritative version as soon as possible.

Our commitment is to continuously enhance this platform, improving readability and navigation for your convenience.

Cerca...