The European Supervisory Authorities, the European Securities and Markets Authority (ESMA), European Banking Authority (EBA) and European Insurance and Occupational Pensions Authority (EIOPA), have published consultation papers on their latest batch of draft standards relating to the Digital Operational Resilience Act (DORA).
The draft standards cover topics including stipulating timeframes for IT incident reporting. An initial report is required within 4-hours of the classification of a major incident, followed by an intermediate report within 72-hours and a final report within 1-month. Draft standards are also set out concerning the management of critical third-party IT providers and security testing.
Responses are accepted until 4th March 2024.
Full details available here.
