23 résultats pour « DORA »
Date : Tags : , ,
The EBA amended its ICT and security risk management guidelines due to DORA. The guidelines now apply only to entities covered by DORA (credit institutions, payment institutions, etc.) and focus solely on payment service user relationship management. PSD2 security and operational risk requirements still apply to other payment service providers not under DORA.
The paper reviews the DORA Regulation, highlighting challenges in supervisory convergence, solution centralization, and oversight fragmentation. It argues that despite DORA's positive steps for digital resilience, Europe's fragmented supervision system hampers its effectiveness. The authors suggest that a more centralized, cross-sectoral supervisory approach is needed for better regulation and supervision.