Implementation of DORA: milestone technical regulatory standards just adopted

Following the delegated acts package adopted on 22 February this year, the Commission has today adopted three new regulatory technical standards (RTSs).

The RTSs complement the EU regulatory frameworks on cybersecurity matters for the financial sector by specifying

1. rules to classify cyber incidents
2. rules to harmonise ICT risk management tools, methods, processes and security policies for financial entities
3. rules to establish the elements of risk that financial entities needs to take into account when developing their policy on the use of ICT services supporting critical or important functions provided by ICT third-party service providers

Now it is for the European Parliament and the Council to scrutinise and adopt the acts.

Related links

• Delegated acts under the DORA Regulation
• Timeline of the DORA delegated acts and stakeholder's feedback
• More on cyber resilience