Date-stamp loading
Version date: 17 July 2024 - onwards

Guideline 11: Information exchanges between the Lead Overseer and competent authorities to ensure the follow-up of recommendations (paras. 11.1-11.3)

11.1 The Lead Overseer should make available to the competent authorities of the financial entities using the ICT services provided by a critical ICT third-party service provider, the following information:

a. Within 10 working days following the receipt by the Lead Overseer:

- the notification of the critical ICT third-party service provider to follow the recommendations issued by the Lead Overseer and the remediation plan prepared by the critical ICT third-party service provider;

- the reasoned explanation of the critical ICT third-party service provider for not following the recommendations;

- the reports specifying the actions that have been taken or the remedies that have been implemented by the critical ICT third-party service provider according to Article 35(1)(c) of the DORA.

b. Within 10 working days after the expiration of the 60 calendar days according to Article 42(1) of the DORA:

- the fact that the critical ICT third-party service provider failed to send the notification

Comparing proposed amendment...