What should the DORA register of information make visible?
It should connect financial entities, ICT providers, contracts, services, functions, criticality, subcontracting, locations, data, and exit information in the prescribed templates.
Operating sequence
- 01
Reconcile legal entities and every ICT contractual arrangement.
- 02
Link services to supported functions and the assessment of critical or important functions.
- 03
Set change controls for renewals, termination, subcontractors, locations, concentration, and exit plans.
Failure modes to avoid
- Recording only strategic suppliers.
- Using supplier-level rows where separate arrangements and services are required.
- Updating the register only for the annual supervisory request.
The source remains the authority.
Commission Implementing Regulation (EU) 2024/2956 — EUR-Lex