DORA’s final draft of the first batch of the regulatory technical standards (RTS) is published by ESAs

On 17 January 2024, the European Supervisory Authorities (EBA, EIOPA and ESMA – the ESAs) have released the first set of final drafts of technical standards under the Digital Operational Resilience Act (DORA).

This first set of rules has been sent to the European Commission, for review and adoption in the coming months.

Financial entities should not delay the compliance journey toward these final draft RTSs and ITS, knowing that on 17 January 2025 all these requirements should be met.

The joint final draft of technical standards include:

• RTS on ICT risk management framework and on simplified ICT risk management framework
• RTS on criteria for the classification of ICT-related incidents
• RTS to specify the policy on ICT services supporting critical or important functions provided by ICT third-party service providers
• ITS on Register of Information

Comparing this set of final draft technical standards with the ones published for consultation on 19 June 2023, there are some important changes that the financial entities should consider and comply with.

Next steps for financial institutions

Financial institutions should start performing or updating their gap assessment based on this final draft set that has been released. The last versions will be published after the European Commission’s review.

Next steps for the European Commission

These final drafts of technical standards have been submitted to the European Commission, with the objective to adopt these standards in the coming months.

How can Deloitte help?

Whether through individual solutions or a comprehensive resilience program, we can guide you through every step of your DORA journey.

We can assist in performing the assessment of your current level of readiness against these final draft standards, but also with methodologies, accelerators and solutions for efficiently meeting the specific requirements of these final drafts RTSs and ITS.

Find out more on how we can support you here.