The European Central Bank (ECB) has published its Guide on outsourcing cloud services to cloud service providers (the "Guide") clarifying how banks are expected to comply with obligations under the EU Digital Operational...more
The European Supervisory Authorities (“ESAs”) published a roadmap to designate critical ICT third-party service providers (“CTPPs”) under the Digital Operational Resilience Act (“DORA”). To designate an ICT third-party...more
Firms involved in implementing changes to comply with new rules under the EU Digital Operational Resilience Act (DORA) have questioned whether financial services provided by other regulated firms may fall within the...more
The EU Digital Operational Resilience Act (“DORA”) is due to apply from 17 January 2025. It is designed to ensure regulated financial entities can withstand and recover from technology issues such as cyber events and...more
The G7 - comprising seven of the world’s leading economies - has published a set of principles designed to promote the safe use of artificial intelligence systems, together with a code of conduct to assist organisations in...more
In recent years, operational resilience has come under the spotlight of financial regulators globally, leading to a proliferation of new regulation. The sheer number of publications on this topic can be confusing for...more