Documento ESMA65-294529287-4737 del 30 settembre 2025 - Orientamenti in materia di esternalizzazione a fornitori di servizi cloud
Documento del Joint Committee of the European Supervisory Authorities JC 2025 29 del 15 luglio 2025 - Digital Operational Resilience Act (DORA): Oversight of critical third-party providers Guide on oversight activities
Documento ESMA65-294529287-2639 dell'11 luglio 2025 - Final Report - Guidelines on outsourcing to cloud service providers
Documento ESMA75-1012365701-566 dell'11 luglio 2025 - Guidelines Compliance Table - Joint Guidelines On the estimation of aggregated annual costs and losses caused by major ICT-related incidents under Regulation (EU) 2022/2554 (JC/GL/2024/34)
Documento ESMA74-2134169708-7780 del 10 aprile 2025 - Final Report on Systematic Internaliser notification (new ITS), on the volume cap and transparency calculations (RTS 3) and circuit breakers (new RTS 7a)
Documento del Joint Committee of the European Supervisory Authorities (EBA, EIOPA, ESMA - ESAs) JC 2025 06 del 7 marzo 2025 - Opinion of the ESAs on the Draft Regulatory Technical Standards specifying the elements that a financial entity has to determine and assess when subcontracting ICT services supporting critical or important functions under Article 30(5) of Regulation (EU) 2022/2054
Documento del Joint Committee of the European Supervisory Authorities (EBA, EIOPA, ESMA - ESAs) JC 2024 108 del 17 gennaio 2025 - Report on the feasibility for further centralisation of reporting of major ICT-related incidents - Article 21 of Regulation (EU) 2022/2554
Documento del Joint Committee of the European Supervisory Authorities (EBA, EIOPA, ESMA - ESAs) JC 2024 99 del 4 dicembre 2024 - Statement on DORA application
Documento del Joint Committee of the European Supervisory Authorities (EBA, EIOPA, ESMA - ESAs) ESA 2024 22 dell'8 novembre 2024 - Decision concerning the reporting by competent authorities to the ESAs of information necessary for the designation of critical ICT third-party service providers in accordance with Article 31(1)(a) of Regulation (EU) 2022/2554
Documento del Joint Committee of the European Supervisory Authorities (EBA, EIOPA and ESMA - ESAs) JC/GL/2024/36 del 6 novembre 2024 - Orientamenti congiunti sulla cooperazione in materia di sorveglianza e sullo scambio di informazioni tra le autorità europee di vigilanza (AEV) e le autorità competenti ai sensi del regolamento (UE) 2022/2554
Documento del Joint Committee of the European Supervisory Authorities (EBA, EIOPA, ESMA - ESAs) JC 2024 53 del 26 luglio 2024 - Final report on Draft Regulatory Technical Standards to specify the elements which a financial entity needs to determine and assess when subcontracting ICT services supporting critical or important functions as mandated by Article 30(5) of Regulation (EU) 2022/2554
Documento del Joint Committee of the European Supervisory Authorities (EBA, EIOPA, ESMA - ESAs) JC 2024 29 del 17 luglio 2024 - Final Report on Draft Regulatory Technical Standards specifying elements related to threat led penetration tests under Article 26(11) of Regulation (EU) 2022/2554
Documento del Joint Committee of the European Supervisory Authorities (EBA, EIOPA, ESMA - ESAs) JC 2024 33 del 17 luglio 2024 - Final Report on Draft Regulatory Technical Standards on the content of the notification and reports for major incidents and significant cyber threats and determining the time limits for reporting major incidents and Draft Implementing Technical Standards on the standard forms, templates and procedures for financial entities to report a major incident and to notify a significant cyber threat
Documento del Joint Committee of the European Supervisory Authorities (EBA, EIOPA, ESMA - ESAs) JC 2024 35 del 17 luglio 2024 - Final Report on Draft Regulatory Technical Standards on harmonisation of conditions enabling the conduct of the oversight activities
Documento del Joint Committee of the European Supervisory Authorities (EBA, EIOPA, ESMA - ESAs) JC 2024 36 del 17 luglio 2024 - Final Report on Joint Guidelines on the oversight cooperation and information exchange between the ESAs and the competent authorities under Regulation (EU) 2022/2554
Documento del Joint Committee of the European Supervisory Authorities (EBA, EIOPA, ESMA - ESAs) JC 2024 54 del 17 luglio 2024 - Final Report on Draft regulatory technical standard on the harmonisation of conditions enabling the conduct of the oversight activities under Article 41(1)(c) of Regulation (EU) 2022/2554
Documento del Joint Committee of the European Supervisory Authorities (EBA, EIOPA, ESMA - ESAs) CC 2024 34 del 5 giugno 2024 - Final Report - Joint Guidelines on the estimation of aggregated annual costs and losses caused by major ICT-related incidents under Regulation (EU) 2022/2554
Documento del Joint Committee of the European Supervisory Authorities (EBA, EIOPA, ESMA - ESAs) JC 2023 86 del 10 gennaio 2024 - Final report on Draft Regulatory Technical Standards specifying the criteria for the classification of ICT related incidents, materiality thresholds for major incidents and significant cyber threats under Regulation (EU) 2022/2554
Documento del Joint Committee of the European Supervisory Authorities (EBA, EIOPA, ESMA - ESAs) JC 2023 86 del 10 gennaio 2024 - Final report on Draft Regulatory Technical Standards - to specify the detailed content of the policy in relation to the contractual arrangements on the use of ICT services supporting critical or important functions provided by ICT third-party service providers as mandated by Regulation (EU) 2022/2554
Documento del Joint Committee of the European Supervisory Authorities (EBA, EIOPA, ESMA - ESAs) JC 2023 85 del 10 gennaio 2024 - Final Report on Draft Implementing Technical Standards on the standard templates for the purposes of the register of information in relation to all contractual arrangements on the use of ICT services provided by ICT third-party service providers under Article 28(9) of Regulation (EU) 2022/2554
Documento del Joint Committee of the European Supervisory Authorities (EBA, EIOPA, ESMA - ESAs) JC 2023 86 del 10 gennaio 2024 - Final report - Draft Regulatory Technical Standards to further harmonise ICT risk management tools, methods, processes and policies as mandated under Articles 15 and 16(3) of Regulation (EU) 2022/2554
