2024 January

Publication of the first wave of RTS and ITS under DORA

• ICT risk management framework and simplified risk management framework (Art. 15, 16 para. 3 DORA)
• Classification of ICT-related incidents (Art. 18 para. 3 DORA)
• Information register (Art. 28 para. 9 DORA)
• Guideline on the procurement of critical / important ICT services (Art. 28 para. 10 DORA)

Further details on the legal acts can be found here.