The European Supervisory Authorities (“ESAs”) published a roadmap to designate critical ICT third-party service providers (“CTPPs”) under the Digital Operational Resilience Act (“DORA”). To designate ...

DORA applies to a wide range of 20 types of financial entities, including banks, insurance companies, investment firms, management companies and crypto-asset service providers. The legislation also ...

The Cybersecurity Act (CSA) came into force in 2019 as part of the EU's efforts to build strong cybersecurity.

DORA, the Digital Operational Resilience Act, regulates how financial services providers manage their ICT risks. But those risks are not necessary wholly contained within the financial institutions – ...