As part of the DORA third party risk management requirements, Financial Entities (FEs) subject to DORA are required to maintain and update a register of information in relation to all contractual arrangements on the use of ICT services provided by ICT third-party service providers.

To help Financial Entities with the requirements in relation to the Register of Information, KPMG’s Risk Consulting Partner and DORA Co-Lead Jackie Hennessy, together with the Risk Consulting team, have put together several resources that focuses on the practical steps firms can take to prepare, review and submit the Register of Information in advance of the upcoming deadline.

Get in touch

Whether you require additional resources or expert knowledge, the skills across our Consulting practice can be drawn upon to aid with the various aspects of your DORA programme.

If you would like to discuss how KPMG can provide guidance and support on your DORA compliance journey, please get in touch with our Technology Risk Consulting Team. We’d be delighted to hear from you.

Read more about the Digital Operational Resilience Act