DORA – Exchange of information and contingency exercises

Exchange of information and contingency exercises

The rules of the Digital Operational Resilience Act (DORA) permit financial undertakings, to exchange information about findings about cyber threats with one another – within reliable communities and while ensuring confidentiality of potentially sensitive information is maintained. Doing so contributes to increasing awareness and strengthens the ability to prevent information and communication technology incidents from occurring, or to fight their impact more effectively.

Financial undertakings notify the Financial Market Authority (FMA) about their involvement in information exchange agreements.

Crisis management and contingency exercises with scenarios for cyber attacks maybe designed by the competent authorities on a cross-sectoral basis.

Questions and Answers

The possibility for such an exchange of information exists due to the DORA and takes place on a voluntary basis.

When participating or ending such an arrangement, then a notification must be made to the FMA.

The contents on this website as well as hyperlinks to third party websites serve the purpose of providing general and non-binding information. “Questions and Answers” do not constitute the FMA’s binding interpretation and in particular do not constitute interpretation within the scope of the question and answer processes (Q&As) of the three European Supervisory Authorities (EBA – European Banking Authority, ESMA – European Securities and Markets Authority, and EIOPA – European Insurance and Occupational Pensions Authority). All information on this website is provided without any guarantee, especially with regard to the up-to-dateness, completeness and correctness, and the FMA, including its employees or the persons responsible for this website, assume no liability whatsoever for the content; in addition, the FMA neither guarantees nor assumes liability for the use of hyperlinks or content that can be accessed via them.