One Year Until the DORA Regulation Comes into Force

Posted by HANDD on 23rd January 2024

Last week (17/01/2024) the three European Supervisory Authorities:

  • European Banking Authority
  • European Insurance & Occupational Pensions Authority
  • European Securities & Markets Authority

Published the first of set of technical rules and templates which will be used under the Digital Operational Resilience Act, DORA.

These standards will come into force on the 17th January 2025 and in the words of the ESAs themselves include:

  • Regulatory Technical Standards (RTS) on ICT risk management framework and on simplified ICT risk management framework;
  • RTS on criteria for the classification of ICT-related incidents;
  • RTS to specify the policy on ICT services supporting critical or important functions provided by ICT third-party service providers (TPPs); and
  • Implementing Technical Standards (ITS) to establish the templates for the register of information.

The standards related to the following Articles of the regulation:  Articles 15, 16(3), 18(3), 28(9) and 28(10).

Press releases containing the drafts can be found on each of the ESAs respective websites:

To mark the release of these items, HANDD Business Solutions conducted a webinar discussing some of the finer details to be delivered under these Articles. To view a recording of the webinar click here.

With now less than a year to go and subsequent RTS due to be published in the summer, organisations in scope for DORA should start shaping their projects to deliver compliance in accordance with the regulation.

The next set of RTS are currently available online for consultation, these can be found on the relevant ESA website:

Keep your eyes peeled on the HANDD website and social media outlets for more DORA related content in the coming weeks.

HANDD will be continually releasing content as the DORA deadline approaches; working with partners and consulting the great and the good to ensure that our partners can plan well in advance.

Need more support on DORA?

You may be interested in reading our previous blog, Not another DORA blog!