ESAs publish a guide on DORA Oversight activities
The European Supervisory Authorities (ESAs) released a guide detailing their oversight of critical ICT third-party providers (CTPPs) under the Digital Operational Resilience Act (DORA). The guide explains the Joint Examination Teams' (JET) processes for this oversight. It offers a high-level overview of the governance, processes, principles, and tools used. The guide is intended for external stakeholders, including financial entities and CTPPs. It aims to help them prepare for the implementation of DORA oversight. Importantly, the guide is not legally binding and doesn't replace existing EU law. The ESAs encourage public use of the document for better understanding. Further information on DORA oversight implementation is available in a separate presentation. The guide clarifies the ESAs' approach to supervising CTPPs under DORA. This document serves as a preparatory resource, not a legal instrument.