Log in or register
Share on LinkedInShare on LinkedIn

ARTICLE · 31 JANUARY 2025

Market Intelligence Thought Leadership Award Winner

Understanding The Register Of Information ('RoI') Requirements Under DORA

CSB Group
Explore more from CSB Group

The Digital Operational Resilience Act (‘DORA'), formally known as Regulation (‘EU') 2022/2554, became applicable to all financial entities within the European Union on 17th January 2025.

MaltaFinance and Banking
Chanelle Meli
Chanelle Meli
Author LinkedIn connections

The Digital Operational Resilience Act ('DORA'), formally known as Regulation ('EU') 2022/2554, became applicable to all financial entities within the European Union on 17th January 2025. This regulation aims to enhance the digital operational resilience of financial entities by establishing uniform requirements for managing Information and Communication Technology ('ICT') risks. A critical component of DORA is the obligation for financial entities to maintain a comprehensive RoI detailing all arrangements with ICT Third-Party Service Providers ('ICT TPPs').

Key Obligations for Financial Entities

Maintenance of the RoI

Under Article 28(3) of DORA, financial entities are required to maintain an up-to-date RoI that includes all contractual arrangements with ICT TPPs. The RoI must be comprehensive, accurately reflecting the scope, nature, and duration of each ICT service used, as well as any associated risks. The register should also include information on

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

Related Articles

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Related Comparative Guides

See more popular content from

Article

Publication Of Commission Delegated Regulation Implementing Key Prospectus Reforms Under The EU Listing Act

The European Commission has published new delegated regulations amending the EU prospectus disclosure regime, introducing streamlined content requirements and standardized formats for various categories of prospectuses. These reforms, part of the broader EU Listing Act package, aim to reduce regulatory burdens for issuers while maintaining investor protection, with key changes including reduced historical financial information requirements and simplified disclosure obligations.
European UnionFinance and Banking
Ganado Advocates
Ganado Advocates
Article

CRD VI And Cross-Border Lending: What Third-Country Credit Institutions Need To Know

The European Union's Sixth Capital Requirements Directive introduces a groundbreaking EU-wide framework requiring third-country credit institutions to establish authorised branches when providing core banking services within the EU. This new regime, effective January 2027, replaces the previous patchwork of national rules with harmonised supervisory standards, though several exemptions and transitional protections apply to existing arrangements.
MaltaFinance and Banking
Camilleri Preziosi
Camilleri Preziosi
Article

AIFMD II Opens The Door To Loan Origination Funds In Malta

With AIFMD II now transposed into Maltese law, fund promoters, asset managers and family offices have access to new regulatory pathways for establishing loan origination and private credit vehicles in Malta. The revised framework expressly permits corporate lending by Alternative Investment Funds, while the updated NAIF regime brings loan origination within scope, opening doors to EU-wide distribution through the AIFMD marketing passport.
MaltaFinance and Banking
Finance Malta
Finance Malta