Regulatory Alerts2024-01-17
Final Report on Draft Implementing Technical Standards on Register of Information for ICT Third-Party Services
The European Supervisory Authorities issued this final report to establish standard templates for the register of information regarding ICT third-party service provider contracts under DORA. Financial entities are required to maintain these registers to monitor ICT third-party risk, with the templates designed to capture contractual arrangements, supply chains, and critical function assessments. The ESAs streamlined the templates based on public consultation feedback to ensure proportionality, harmonization, and efficient data management for supervisory oversight.
Share