Publication of the first wave of RTS and ITS under DORA

  • ICT risk management framework and simplified risk management framework (Art. 15, 16 para. 3 DORA)
  • Classification of ICT-related incidents (Art. 18 para. 3 DORA)
  • Information register (Art. 28 para. 9 DORA)
  • Guideline on the procurement of critical / important ICT services (Art. 28 para. 10 DORA)

Further details on the legal acts can be found here.