EU Financial Regulatory Q&A Database

Official Q&As published by EBA, ESMA, EIOPA and the ESA Joint Committee. Non-binding but treated as authoritative guidance by national competent authorities across the EU.

EBA 4,397 ESMA 1,523 EIOPA 2,635 Joint Committee 256

Final Archive Pending Rejected All

Final — published answer Archive — superseded (EBA only) Pending — awaiting answer Rejected — out of scope or duplicate

Clear all filters

44 Q&As matching current filters · page 1 of 1

Obligation to apply the ICT risk managment (Art. 5-15) and/or the simplified ICT risk management framework for entities that hold two or more licences.

Regulation (EU) 2022/2554 - The Digital Operational Resilience Act (DORA) · Art. Art. 5-15, Art. 16 DORA; Art. 12 (1) IFR + Art. 12 ECSPR

ESMA Answer Published

Answered 2025-12-17

Audit frequency limitations

Regulation (EU) 2022/2554 - The Digital Operational Resilience Act (DORA) · Art. 28(6), 30(3)(e)

ESMA Answer Published

Answered 2025-09-18

Does DORA also apply to non-EU AIFM?

Regulation (EU) 2022/2554 - The Digital Operational Resilience Act (DORA)

ESMA Answer Published

Answered 2025-05-27

direct agreements between AIF and ICT service provider

Regulation (EU) 2022/2554 - The Digital Operational Resilience Act (DORA)

ESMA Answer Published

Answered 2025-02-26

Article 3(28) and EU Subcontractors

Regulation (EU) 2022/2554 - The Digital Operational Resilience Act (DORA)

ESMA Answer Published

Answered 2024-12-17

Questions on Microenterprises and RMF

Regulation (EU) 2022/2554 - The Digital Operational Resilience Act (DORA) · Art. Final Report on Draft RTS on ICT Risk Management Framework and on Simplified ICT Risk Management Framework

ESMA Answer Published

Answered 2024-12-11

Application of DORA to AIFMs which have chosen to opt-in to the application of the AIFMD but whose asset under managment is below the thresholds as provided for by Article 3(2) of AIFMD

Regulation (EU) 2022/2554 - The Digital Operational Resilience Act (DORA) · Art. Articles 2(1)(k) and 2(3)(a), Regulation (EU) 2022/2554 (“DORA”)

ESMA Answer Published

Answered 2024-12-03

Size Thresholds for Self-Managed AIFs and UCITS

Regulation (EU) 2022/2554 - The Digital Operational Resilience Act (DORA) · Art. Article 3 of the DORA Regulation points (60), (63) and (64)

ESMA Answer Published

Answered 2024-08-12

Understandig of timelimits of intermediate repots for major related ICT-incidents

Regulation (EU) 2022/2554 - The Digital Operational Resilience Act (DORA) · Art. Draft RTS Article 6 section 1 lit. b)JC 2023 70

ESMA Answer Published

Answered 2024-04-15

Application of DORA for outsourced critical services that are not ICT

Regulation (EU) 2022/2554 - The Digital Operational Resilience Act (DORA)

ESMA Answer Published

Answered 2024-02-12

EUC, EULA and Shadow IT

Regulation (EU) 2022/2554 - The Digital Operational Resilience Act (DORA)

ESMA Answer Published

Answered 2024-02-11

conclusion of ICT arrangement for the purpose of tests

Regulation (EU) 2022/2554 - The Digital Operational Resilience Act (DORA)