Europejski Urząd Nadzoru Bankowego, Europejski Urząd Nadzoru Giełd i Papierów Wartościowych (European Securities and Markets Authority - ESMA), Europejski Urząd Nadzoru Ubezpieczeń i Pracowniczych Programów Emerytalnych (European Insurance and Occupational Pensions Authority - EIOPA), Ostateczne sprawozdanie dotyczące wspólnych wytycznych dotyczących współpracy nadzorczej i wymiany informacji między ESA a właściwymi organami nadzorczymi na mocy Rozporządzenia (UE) 2022/2554

JC 2024 36

17 July 2024

Final Report on Joint Guidelines on the oversight cooperation and information exchange between the ESAs and the competent authorities under Regulation (EU) 2022/2554

1. Executive Summary

Introduction and scope

Regulation (EU) 2022/2554 („DORA”) introduces a pan-European oversight framework of ICT thirdparty service providers designated as critical (CTPPs). As part of this oversight framework, the European Supervisory Authorities (ESAs) and competent authorities (CAs) have received new roles and responsibilities. For example, on the one hand, the ESA, as Lead Overseer (LO), is responsible to exercise oversight activities on the CTPPs, issue recommendations and follow up with the CTPPs on these recommendations. On the other hand, competent authorities (CAs), for example, participate in the LO's oversight of the CTPP as part of the Joint Examination Team (JET) and follow up with financial entities concerning the risks identified in the recommendations.

In order to...