Regulatory Alerts2025-06-30
Guidance on Reporting ICT Service Agreements
The Norwegian Financial Supervisory Authority issues this guidance to implement the Digital Operational Resilience Act (DORA) requirement for entities to report planned ICT service agreements supporting critical or important functions. Entities must submit notifications using Altinn form KRT-1121 at least 30 days before the agreement or significant changes take effect. The Authority retains the power to request additional documentation and enforce contract termination or modification if non-compliance with DORA Articles 28-30 is identified.
Share