DORA regulation outlining process for identifying critical ICT third-parties published
It implements the specific assessment approach to be used by supervisory authorities and outlines fees payable by vendors designated as critical.
Your DORA questions answered – CIFs
This third of a series of six articles covering a practical session organised by Ashurst focuses on critical or important functions.
Managing vendors supporting critical or important functions - from zero to full compliance with DORA
A summary of key practical steps based on the draft technical standard.
The Action Plan does not create new legal obligations but sets out steps for operationalizing the AI Act, NIS2, DORA, and the Cyber Resilience Act.
What financial business leaders can learn from the Roman general.
The ECB has given eurozone banks until October 31, 2026, to submit plans on how they will strengthen governance and resilience against growing AI-enabled cyberthreats.
This article examines the key challenges firms have encountered in their DORA compliance journeys and explores some of the practical solutions.
Joint ESA report also highlights the role of third parties as incident originators and warns about impending risk from AI.
Charles Herbert and James Clark discuss the potential for regulatory alignment across two areas of importance – digital law, and financial services regulation.
As regulators move from trialling AI to active oversight, firms face pressure to build governance structures to withstand scrutiny across multiple jurisdictions.
Norway’s financial infrastructure remains resilient, but rising cyber threats, third-party dependencies, and operational risks are rapidly changing the landscape.
