Financial institutions across Europe are determining which third-party vendors underpin their most critical operations as a part of the EU’s milestone Digital Operational Resilience Act, which takes ...

The Digital Operational Resilience Act (DORA) has been in effect for over two months (since 17th January 2025, with the previous two years for preparation), but some organizations are still unprepared ...

Central counterparties (CCPs) and exchanges fear information disclosure requests from their bank members will become excessive under the current interpretation of new European legislation. The ...

The financial service industry is well-versed in stringent regulations. Unlike other sectors adjusting to legislation like Network and Information Systems Directive 2 (NIS2), FS organisations are ...

In mid-December the European Union (EU) enacted new legislation aiming at harmonizing, and tightening, information technology (IT) security rules in the financial sector: Regulation (EU) 2022/2554 on ...

The European Supervisory Authorities (ESAs) have published a roadmap for the designation of critical ICT third-party service providers (CTPPs) under the EU Digital Operational Resilience Act (DORA).

London – 22 November 2023: Firms across the sell-side are making significant changes to how they approach third-party risk management to meet the requirements of the EU’s Digital Operational ...