Question ID: DORA176 - 3238
Regulation Reference: (EU) 2022/2554 - Digital Operational Resilience Act (DORA)
Topic: Register of Information (DORA)
Article: 28(3)
Status: Rejected
Date of submission: 03 Feb 2025
Question
For the purpose of preparing the Register of ICT Supplier Information (RoI) on a sub-consolidated basis, is it necessary to include within the different templates (ref. “B_XX.XX.XXX”) the information pertaining to both the Contractual Agreements that the Entity signs and those that it uses? Specifically then, the “financial entity maintaining the register of information” is to be considered corresponding to the "entity signing the contractual arrangement" and the "financial entity making use of the ICT service(s)"?
EIOPA answer
This question has been rejected because the instructions clearly mentioned the compulsory nature of providing those information.