The guide sets out the central bank's expectations on the requirements of DORA, including good practices which add an additional layer of complexity.
DORA Article 28
Developments include: potential standardization of threat-led penetration testing, new oversight director for DORA and ESA's work program.
An interdisciplinary approach between firms and their service providers is crucial to successfully "tame" DORA says PJ Di Giammarino of JWG.
Covering application of the Guide; overview of the ECB's supervisory expectations, including governance of cloud services and BCPs; and the DORA timetable.
Requirements imposed on financial services institutions when procuring ICT services from third parties – regulation and best practice.