2025-09-17
Finansinspektionen issued regulations requiring financial entities under its supervision to report serious ICT-related incidents and significant cyber threats in accordance with the EU Digital Operational Resilience Act. The rules mandate that these entities submit their full register of information on contractual arrangements annually by 28 February, with the first submission due by 15 April 2025. These provisions entered into force on 17 January 2025 to ensure compliance with DORA's operational resilience standards.