The first part of this discussion paper presents proposals in relation to the elements needed to specify further the criteria referred to in Article 31(2) of the DORA to be considered by the …

This article is designed to provide guidance to in-house legal and procurement teams to understand how to achieve DORA contracts compliance at a practical level, with discussion of …

May 15, 2024 · Article 28 sets out an extensive list of general principles to be applied for ICT third-party risk management including several principles related to contractual agreements.

Jul 31, 2024 · In this blog post, we take a look at second-level requirements under DORA covering subcontracting information and communications technology (ICT) services supporting critical …

The Client and ICT Third-Party Service Provider (together, the “Parties”) hereby agree that this Addendum (the "Addendum") amends the Contract between the Parties by incorporating the …

The Digital Operational Resilience Regulation, Regulation (EU) 2022/2554 (“DORA”) requires that twenty-one diferent types of financial entities covered by the Regulation shall contract with ICT …

Mar 14, 2024 · Our DORA team has compiled a comparison of the EBA and ESMA (cloud) outsourcing guidelines and the DORA provisions in the context of the relationship with third …

The European Supervisory Authorities (ESAs) are currently preparing for the application of the Digital Operational Resilience Act (DORA), by focusing on policy implementation, setting up …

Jan 20, 2025 · DORA stipulates different minimum contract contents for the outsourcing of IT services to third-party service providers*. For example, the ICT contracts must cover security …

Mar 14, 2025 · This guide is for financial entities and ICT service providers operating within the European Union. If your organisation relies on third-party ICT services, Article 30 of the Digital …