Europejski Urząd Nadzoru Bankowego, Europejski Urząd Nadzoru Giełd i Papierów Wartościowych (European Securities and Markets Authority - ESMA), Europejski Urząd Nadzoru Ubezpieczeń i Pracowniczych Programów Emerytalnych (European Insurance and Occupational Pensions Authority - EIOPA), Raport końcowy - Projekt regulacyjnych standardów technicznych w celu dalszej harmonizacji narzędzi, metod i polityk zarządzania ryzykiem TIK, procesów i polityk zgodnie z upoważnieniem zawartym w art. 15 i art. 16 ust. 3 rozporządzenia (UE) 2022/2554

JC 2023 86

10 01 2024

Final report

Draft Regulatory Technical Standards

to further harmonise ICT risk management tools, methods, processes and policies as mandated under Articles 15 and 16(3) of Regulation (EU) 2022/2554

1. Executive Summary

Reasons for publication

1. Regulation (EU) 2022/2554 of the European Parliament and of the Council of 14 December 2022 on digital operational resilience for the financial sector and amending Regulations (EC) No 1060/2009, (EU) No 648/2012, (EU) No 600/2014, (EU) No 909/2014 and (EU) 2016/1011 (hereinafter ‘DORA’) tasks the ESAs, under its Article 15, to develop draft regulatory technical standards (‘RTS’) aiming at ‘further harmonisation of ICT risk management tools, methods, processes and policies’, and under its Article 16, to develop a simplified ICT risk management framework for certain financial entities. Section 2 of this report presents in detail the mandate and background to the final daft RTS which is included in Section 3.

2. This report follows...