Carmen Cracknell2 min read
Martina Lindberg7 min read
Kevin Kinsella2 min read

A consideration of the expectations and processes to follow should an in-scope entity, (including banks, assets managers, and insurers), suffer a cyberattack.
Amit Tyagi | CMS, Aurélia Viémont | CMS4 min read

While not legally binding, the guide provides clarity on ESMA’s assessment process for financial entities navigating the registration process.
Jean Hurley1 min read

Comprehensive register of key documents is relevant to all organizations running digital systems and needing to ensure their security.
Thomas Hyrkiel2 min read

ICT providers designated critical under DORA will get six weeks to challenge the designation.
Jean Hurley1 min read

DORA ICT risk management requirements apply to financial entities in their place.
Thomas Hyrkiel1 min read

With DORA now in effect, the EU’s financial sector is entering a new phase of operational resilience obligations, where firms must shift from preparation to action.
Nathaniel Lalone | Katten, Ciara McBrien | Katten5 min read

Although non-mandatory and applicable to regulated entities in Germany the practical guidance offers helpful insight into key aspects of the new regime.
Thomas Hyrkiel1 min read

A look at how DORA will bring change in practical terms, including reach and extraterritoriality.
Trevor Dolan | Eversheds Sutherland5 min read