European Securities and Markets Authority and other European Supervisory Authorities set 2025 process to designate critical ICT third-party providers under DORA
The European Securities and Markets Authority, with the European Banking Authority and the European Insurance and Occupational Pensions Authority, will implement the Digital Operational Resilience Act (DORA) oversight framework for critical ICT third-party service providers starting in 2025. The process involves criticality assessments and designations, with oversight engagement commencing post-designation. An online workshop is planned for Q2 2025 to explain the preparatory activities and oversight approach.