ESAs respond to the EC’s rejection of the draft ITS on the register of information under DORA
On 15 October 2024, the European Supervisory Authorities (ESAs) issued an opinion regarding the European Commission’s (EC) rejection of the draft Implementing Technical Standards (the Draft ITS) for the register of information under the Digital Operational Resilience Act (Regulation (EU) 2022/2554, DORA). DORA requires financial entities to maintain and regularly update a register of information covering all contractual agreements with ICT third-party service providers. This register is crucial for managing third-party ICT risks and will enable the EU competent authorities and ESAs to supervise compliance with DORA and identify critical ICT service providers subject the DORA’s oversight framework. The Draft ITS contains standard templates for this register.