The European Supervisory Authorities (ESAs) have published templates, technical documents, and tools for the voluntary ‘dry run exercise’ to support the implementation of the Digital Operation Resilience Act (DORA).

The ESAs, the European Banking Authority (EBA), European Insurance and Occupational Pensions Authority (EIOPA), and European Securities and Markets Authority (ESMA), announced the dry run exercise on the reporting of registers of information in April 2024 to help the industry prepare for the DORA.

Their published materials include: Templates for the registers of information with examples; the draft technical package for reporting, including data point model (DPM), annotated table layout and validation rules; an optional tool to assist with the conversion of Excel templates; and frequently asked questions about the exercise.

These materials and tools can be used by financial entities to prepare and report their registers of information of contractual arrangements on the use of ICT third-party service providers in the context of the dry run exercise.

Furthermore, they aim to help financial organisations to understand the supervisory expectations for the reporting of registers from 2025 onwards.

Financial entities that are participating in the dry run exercise are expected to submit their registers of information to the ESAs through their competent authorities between 1 July and 30 August 2024.

Providing background on the announcement, the ESAs stated: “The ESAs note that following the specification of the dry run exercise as announced in April, materials and tools published today are meant solely for the purposes of the dry run exercise as they are (1) based on the final report on the Draft Implementing Technical Standards (ITS) on registers of information published and submitted in January 2024 by the ESAs to the EU Commission for adoption and, therefore, do not reflect the final legal act adopted by the EU Commission, (2) presented in a draft form (DPM and validation rules).

“The final technical package for the steady-state reporting, which will start in 2025, will be published later in the year.”

---