The Digital Operational Resilience Act (DORA) introduces, among other things, an obligation for financial intermediaries to maintain and update, at entity level and on a sub-consolidated and consolidated basis, a register of information covering all contractual arrangements for the use of ICT services provided by third parties. From 2025 onwards, the register will have to submitted annually to the national authorities and will provide a useful tool for operators to manage third-party risks, a supervisory tool for the national authorities and, lastly, the reference database for the identification of critical technological providers to be subject to the new oversight framework provided for by DORA.
In view of the application of DORA, Banca d'Italia has recently joined the voluntary exercise ('Dry Run') on the reporting of registers of information organized by EBA, ESMA and EIOPA, which aims to help industry prepare for the annual submission required from 2025 onwards.
Financial intermediaries wishing to explore the way in which the registers of information are prepared and the outcomes of the 2024 Dry Run exercise are invited to take part in an information workshop on 18 December 2024.
The workshop will be held virtually from 10.00 am to 1:00 pm. Interested parties may register by 16 December 2024 at this link.
