EC: DORA Delegated Regulations
The following have been published in the Official Journal: (i) Commission Delegated Regulation (EU) 2024/1772 of 13 March 2024 supplementing DORA with regard to regulatory technical standards specifying the criteria for the classification of ICT-related incidents and cyber threats, setting out materiality thresholds and specifying the details of reports of major incidents; (ii) Commission Delegated Regulation (EU) 2024/1773 of 13 March 2024 supplementing DORA with regard to regulatory technical standards specifying the detailed content of the policy regarding contractual arrangements on the use of ICT services supporting critical or important functions provided by ICT third-party service providers; (iii) Commission Delegated Regulation (EU) 2024/1774 of 13 March 2024 supplementing DORA with regard to regulatory technical standards specifying ICT risk management tools, methods, processes, and policies and the simplified ICT risk management framework.