ESAs to launch dry-run DORA information collection exercise

Article summary

The three European Supervisory Authorities (the European Banking Authority, the European Insurance and Occupational Pensions Authority and the European Securities and Markets Authority—ESAs) are to launch in May 2024 the voluntary exercise for the collection of the registers of information of contractual arrangements on the use of ICT third-party service providers by financial entities. Under the Digital Operation Resilience Act (DORA) and starting from 2025, financial entities will have to maintain registers of information regarding their use of ICT third-party providers.