Share on LinkedInShare on LinkedIn

ARTICLE · 20 MARCH 2025

Regulations And Level Three Documents Recently Published Under The Digital Operational Resilience Act

Addleshaw Goddard
Addleshaw Goddard
Contributor
Addleshaw Goddard

Addleshaw Goddard

Addleshaw Goddard is a global law firm trusted by over 3,000 major organisations, including 51 FTSE...

View firm profile
Explore more from Addleshaw Goddard

The European authorities and the EU Commission have recently issued several regulations and level three documents under the Digital Operational Resilience Act (DORA).

European UnionFinance and Banking

The European authorities and the EU Commission have recently issued several regulations and level three documents under the Digital Operational Resilience Act (DORA). These include final guidelines on ICT and security risk management in context of DORA application, new Delegated Regulation on RTS on threat-led penetration testing and the roadmap for designation of critical ICT third-party service providers under DORA.

The European authorities and the EU Commission have recently issued several regulations and level three documents under DORA. These include the following:

1. EBA amends final guidelines on ICT and security risk management in context of DORA application

On 11 February 2025, the European Banking Authority (EBA) published a final report (EBA/GL/2025/02) containing guidelines amending its guidelines on ICT and security risk management.

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

See more popular content from