2024-07-17
The European Supervisory Authorities issued this final report on draft Regulatory Technical Standards to harmonise oversight conditions for critical ICT third-party service providers under DORA. The standards specify the detailed information, structure, and format required for voluntary designation applications, ongoing reporting to the Lead Overseer, and risk assessments by competent authorities. Following a public consultation, the ESAs incorporated feedback to refine these requirements before submitting the draft to the European Commission for adoption, with application expected by January 2025.