Third Party Management Pursuant DORA

Under the European Commission Delegated Regulation (EU) 2024/1773, suppliers of Information and Communication Technology (ICT) services to financial entities are subject to stringent obligations, particularly in relation tocertifications, which are deemed a cornerstone in mitigating the risks associated with outsourcing key technological functions. This regulatory framework, part of the broader Digital Operational Resilience Act(DORA), underscores the critical importance of ensuring that financial institutions can maintain uninterrupted services, manage risks effectively, and adhere to regulatory requirements, even when they depend on external ICT providers.

The role of certifications in ensuring operational resilience