Search QAs

The QRT S.02.01.01 (with a comparison of the statutory balance sheet and the prudential balance sheet) is from now on requested for the quarterly financial stability group reporting (instead of the QRT S.02.01.02 with only the prudential balance sheet). Some groups don't have quarterly consolidated accounts. For those groups, is it allowed to leave blank "the statutory accounts" column of this QRT for the first quarter and the third quarter of the year?

Could you elaborate "Insurance policies" in QRT S.37.01.
1. What kind of insurance risk concentrations should we include and how. Should we sum all the risks and policies together from the same counterparty even if the risks are not in the same risk concentration, if you consider two buildings far away from each other.

I have consulted the final version of the second batch of technical standards for DORA. I'm able to match mandate articles in each case, except for article 30.5. This one used to point to "JC 2023 67 - CP on draft RTS subcontracting" but I can't see a final version of this document in the release of July 17, nor any related info: https://www.eiopa.europa.eu/publications/second-batch-policy-products-u… Is its release postponed (for when in that case)? Or is it accepted as-is, without modification?

Could you please provide examples or specifications on authenticity concepts/methods under DORA?

Does the reference in Art. 30 para. 3 (c) DORA on “the provision of services by the financial entity in line with its regulatory framework” relate to the services the financial entity provides to its customers (e.g. the policy holders in case of an insurance undertaking)?

How is Art. 30 para. 3 (e) (iv) DORA to be interpreted?

How is “on an ongoing basis“ defined (Article 3 No. 21 DORA)?

Art.8 III DORA: Financial entities, other than microenterprises, shall perform a risk assessment upon each major change in the network and information system infrastructure, in the processes or procedures affecting their ICT supported business functions, information assets or ICT assets. What does DORA understand by "major changes"? What are the criteria for major changes?

Is our understanding correct, that an ICT-service only “supports” a critical or important function if it is material and not only helpful for the critical or important function?