Duty LXD-8032
Is a payment provider, in Norway
Digital Operational Resilience in the Financial Sector: ICT Incident Management and Reportingsince 3 lines
Lov om digital operasjonell motstandsdyktighet i finanssektoren (DORA-loven), §§ 1, 3 and 4 (Regulation (EU) 2022/2554, Arts. 17 to 19) · Read the law's page
- Applies to the financial entities within Regulation (EU) 2022/2554 (DORA), which section 1 of the DORA Act gives the force of law in Norway. Reached by declaring that you provide financial services.
- Put in place the ICT-related incident management process that Article 17 of Regulation (EU) 2022/2554 requires (DORA Act, section 4(1)(i)).
- Report major ICT-related incidents as paragraphs 1, 3 and 4 of Article 19 of the Regulation require (DORA Act, section 4(1)(j)).
Digital Operational Resilience in the Financial Sector: ICT Risk Management and Testingsince 3 lines
Lov om digital operasjonell motstandsdyktighet i finanssektoren (DORA-loven), §§ 1, 3 and 4 (Regulation (EU) 2022/2554, Arts. 5 to 16 and 24 to 42) · Read the law's page
- Applies to the financial entities within Regulation (EU) 2022/2554 (DORA), which section 1 of the DORA Act gives the force of law in Norway. Reached by declaring that you provide financial services.
- Meet the ICT risk management requirements of Regulation (EU) 2022/2554. Section 4(1)(a) to (h) of the DORA Act names Articles 5, 6, 8, 9(4), 11, 12 and 14, and the simplified framework of Article 16(1) and (2) where it applies to you, as the provisions whose breach can draw a fine.
- Meet the Regulation's requirements on digital operational resilience testing and ICT third-party risk (Articles 24, 25(2), 28 and 42(3), DORA Act, section 4(1)(k) to (n)).