ESAs specify criticality criteria and oversight fees for critical ICT third-party providers under DORA

Here is a summary of the provided document:

Summary:

The European Supervisory Authorities (EBA, EIOPA, and ESMA) have published a joint response to the European Commission's Call for Advice on two delegated acts under the Digital Operational Resilience Act (DORA). The acts aim to specify further criteria for critical ICT third-party service providers (CTPPs) and determine oversight fees levied on such providers. The ESAs propose 11 quantitative and qualitative indicators to assess criticality, with minimum relevance thresholds for quantitative indicators. For oversight fees, the ESAs suggest determining the amount of fees to be levied on CTPPs and the way they are to be paid, as well as a financial contribution for voluntary opt-in requests. The response is based on a public consultation and takes into account 41 responses received from various stakeholders.