2024 July

Publication of the second wave of RTS and ITS under DORA Determination of aggregated costs and losses for ICT-related incidents (Art. 11 para. 1 DORA) Reporting of significant ICT-related incidents (Art. 20 lit. a), b) DORA) Centralization of incident reporting (Art....

2024 January

Publication of the first wave of RTS and ITS under DORA ICT risk management framework and simplified risk management framework (Art. 15, 16 para. 3 DORA) Classification of ICT-related incidents (Art. 18 para. 3 DORA) Information register (Art. 28 para. 9 DORA)...

2023 September

Criteria for the classification of critical ICT service providers within the meaning of Art. 31 DORA (Call for Advice to the ESAs).