DORA Communications and Publications

Expectation of Firms’ Preparations for DORA 

17 June 2024

The DORA technical standards (RTSs and ITSs) will apply along with DORA from 17 January 2025. At this current time, all firms should have a good understanding of the requirements set out in DORA and the supporting RTSs/ITSs that are available. Gap analysis to firms’ existing frameworks, policies and processes should be substantially complete. This analysis should inform the steps to be taken to achieve DORA compliance by January 2025.

ESAs exercise for ad hoc collection of DORA Registers of Information (RoI) 

20 May 2024

The Digital Operational Resilience Act (DORA) applies to a wide range of financial entities regulated by the Central Bank of Ireland (CBI). Under DORA financial entities are required to maintain and update their Register of Information (RoI) in relation to all contractual arrangements on the use of ICT services provided by ICT third-party service providers. 

The European Supervisory Authorities (ESA) have introduced a voluntary exercise to help financial entities establishing their RoI, based on information specified in the ESAs’ final draft Implementing Standards on the registers of information in order to test reporting their RoI in a manner similar to that foreseen from January 2025 onwards.

This dry run RoI collection (which will run from July to August 2024) is a voluntary exercise, on a best effort basis, and although the CBI will be reaching out to a sample of firms to request their participation in this exercise, it is open to all financial entities which will be subject to DORA. 

The ESAs held a workshop for industry on this on 30 April 2024. A recording of this workshop and the slides are now available. These provide clarity of the intention and mechanism of the dry run exercise and indicates the expectation of the ESAs with regards to a formal collection of the complete registers starting from early 2025. 

If your firm wishes to volunteer to participate in this exercise, please contact your normal supervisory point of contact in the CBI before Wednesday 29th May 2024.