Question ID: 2994
Regulation Reference: (EU) 2022/2554 - Digital Operational Resilience Act (DORA)
Topic: Other DORA topics
Status: Rejected
Date of submission: 14 Feb 2024
Question
Art. 30 III e) ii) requires undertakings to agree the right on alternative assurance levels if other clients’ rights are affected. It is unclear how to include this in the contractual agreement. Does this mean e.g. third party audits can be sufficient?
EIOPA answer
Question is rejected because it is an institution-specific question requiring bespoke advice.