Register of Information Templates – ITS (Final Report, JC 2023 85)
Final Report on Draft Implementing Technical Standards on the standard templates for the purposes of the register of information in relation to all contractual arrangements on the use of ICT services provided by ICT third-party service providers under Article 28(9) of Regulation (EU) 2022/2554
Abstract
Final Report containing draft Implementing Technical Standards under DORA Article 28(9) specifying standard templates for the register of information on all contractual arrangements for ICT services provided by ICT third-party service providers. The register aims to support financial entities’ ICT third-party risk management, enable competent authorities’ supervision of ICT dependencies, and support the DORA oversight framework for critical ICT third-party providers by using harmonised, relational templates and identifiers.
Key Takeaways
- Provides draft ITS establishing standard templates for the DORA register of information covering all ICT third-party contractual arrangements.
- Defines a relational register structure (multiple linked templates) using consistent keys such as contractual arrangement reference number, LEI, function identifier, and ICT service type.
- Designed to support (i) internal ICT third-party risk management, (ii) supervisory oversight by competent authorities, and (iii) the DORA oversight framework for critical ICT third-party providers.
- Applies proportionality: additional information is expected where ICT services support critical or important functions or material parts thereof.
- Emphasises data quality and consistent identification (including LEI usage) to enable aggregation and reduce reporting burden.
Keywords
Need DORA-Aligned AI Architecture?
We build AI systems that satisfy DORA requirements from day one. Audit trails, governance, exit readiness - built in, not bolted on.
Schedule Architecture Reviewviktor@intellectumlab.com | Response within 24 hours