EIOPA publishes new Q&A under DORA

The European Insurance and Occupational Pensions Authority (EIOPA) has published a Q&A under the Digital Operational Resilience Act (DORA) on the interpretation of Article 13 of Commission Delegated Regulation (EU) 2024/1774 (comprising the regulatory technical standards on ICT risk management), which supplements DORA. The clarification concerns the Article 13(c) which requires financial entities to implement the use of a separate and dedicated network for the administration of ICT assets. EIOPA confirms that such administration should be interpreted broadly so as to include both manual and automated activities and processes, and cross refers to other DORA articles which are relevant for interpreting this provision.

Return to main website.