Managing vendors supporting critical or important functions - from zero to full compliance with DORA
A summary of key practical steps based on the draft technical standard.
EU DORA RTS - third party contractual arrangements - Art 1
Outlines the complexity and risk considerations that need to be taken under consideration in a written policy covering services supporting the financial institution's critical or important functions that are provided by third parties.
Overview
Rules in This Collection
Notable
Latest News
Further Reading
Notable
Your DORA questions answered – Extraterritoriality and interaction with existing rules
This last of a series of six articles covering a practical session organised by Ashurst focuses on how DORA will interact with existing rules as well as its extraterritorial effects.
Your DORA questions answered – ICT services in scope
This second of a series of six articles covering a practical session organised by Ashurst focuses on the ICT services in scope of DORA.
Latest News
More on DORA
-
Demystifying the debate on the US CLOUD Act vs European/UK Data Sovereignty
Practical advice and steps for organizations to understand and comply with sovereignty and localization rules.
-
Lietuvos Bankas sets out agenda for dialogue with financial sector
The central bank intends to hold 17 events tied to compliance-central topics such as DORA, AML, and third-party risk management.
-
Iceland's Central Bank publishes priorities for financial market supervision
Cybersecurity, responsible business practices, and combating money laundering are among the 2026-2028 focus areas.
-
Ashurst Data Bytes 2026: Ready or not, increased cyber scrutiny is here
An Ashurst panel, together with guest speaker Will Barlow of Crowdstrike, discussed what steps you should be taking to prepare for a cybersecurity incident.
-
The EU's DORA: Strategic implications for third-party financial service providers
Many global organizations have learned that without appropriate oversight, third parties can become liabilities. Max Veve says DORA is the stand out regulation.
-
Building a resilient human firewall in UK financial services
The stark reality of modern cyber defence is that technology, however sophisticated, is easily bypassed by human error.
-
Europol issues critical roadmap for "quantum-proofing" global finance
Risk-based framework to help FIs identify which of their systems must be upgraded first to defend against the future threat of quantum computers.
-
EU designates critical ICT third-party providers under DORA
European supervisors carried out a systematic assessment of the importance of each service provider to the financial sector, before deciding on designation.
Further Reading
