DIGITALEUROPE’s response to the Joint European Supervisory Authorities’ public consultation on the second batch of policy mandates under DORA

Executive summary

This document offers DIGITALEUROPE’s contributions to the European Supervisory Authorities’ (EBA, EIOPA and ESMA) public consultation on the second batch of policy mandates under the Digital Operational Resilience Act (DORA). This includes a response to the draft Regulatory Technical Standards (RTS) on: content, timelines and templates on incident reporting; subcontracting of critical or important functions; threat-led penetration testing (TLPT); and on harmonisation of conditions enabling the conduct of the oversight activities.