DORA·Articulo 44

International cooperation

Cooperación InternacionalRiesgo de Terceros TICSector FinancieroMejores Prácticas RegulatoriasSupervisión Transfronteriza

Resumen en lenguaje claro

Las empresas deben anticipar que la cooperación internacional entre reguladores financieros europeos y de terceros países en materia de riesgo de terceros TIC, así como el desarrollo de mejores prácticas, influirá directamente en las expectativas regulatorias y en la supervisión de sus propias estrategias de ciberseguridad y gestión de riesgos.

Texto oficial (EN)

1. Without prejudice to Article 36, EBA, ESMA and EIOPA may, in accordance with Article 33 of Regulations (EU) No 1093/2010, (EU) No 1095/2010 and (EU) No 1094/2010, respectively, conclude administrative arrangements with third-country regulatory and supervisory authorities to foster international cooperation on ICT third-party risk across different financial sectors, in particular by developing best practices for the review of ICT risk management practices and controls, mitigation measures and incident responses.

2. The ESAs shall, through the Joint Committee, submit every five years a joint confidential report to the European Parliament, to the Council and to the Commission, summarising the findings of relevant discussions held with the third countries’ authorities referred to in paragraph 1, focusing on the evolution of ICT third-party risk and the implications for financial stability, market integrity, investor protection and the functioning of the internal market. CHAPTER VI Information-sharing arrangements