Obligations due by this deadline
For all in-scope entities
- Art 11 — The ESAs, through the Joint Committee, shall develop common guidelines on the estimation of aggregated annual costs and losses referred to in paragraph 10.
- Art 32 — The ESAs shall issue guidelines on the cooperation between the ESAs and the competent authorities covering detailed procedures for task allocation and information exchanges.
- Art 41 — The ESAs shall submit the draft regulatory technical standards to the Commission.
- Art 43 — The Commission is empowered to adopt a delegated act to determine the amount of the fees and the way in which they are to be paid by critical ICT third-party service providers.
For financial services
- Art 20 — The ESAs shall submit the common draft regulatory technical standards and common draft implementing technical standards to the Commission.
- Art 26 — The ESAs shall submit those draft regulatory technical standards to the Commission by 17 July 2024.
- Art 31 — The Commission is empowered to adopt a delegated act to supplement this Regulation by specifying further the criteria for designation by 17 July 2024.
Checklist — what you need to have done
- Art 11: develop
- Art 20: submit
- Art 32: issue
- Art 31: adopt
What should already be in place — audit framing
17 July 2024 is 683 days behind us. The obligations on this page have been in force since then; treat any gap as an audit finding, not a planning question. The expected baseline under DORA:
- ICT risk-management framework review — should be done already
- digital operational resilience testing — should be done already
- third-party register population — should be done already
If any of these are missing, the right next step is a gap assessment plus a documented remediation plan — not a re-design of the underlying programme.
Related Fontvera pages
- dora article 9 financial entities
- dora obligations central securities depositories
- dora obligations financial services
- dora obligations ict services
Check your full compliance exposure with the 5-minute Fontvera diagnostic →