The obligation to keep registers of information applies only to financial entities in scope of DORA. Therefore, if the parent undertaking is not a financial entity, the obligation does not apply to the parent undertaking at individual level.

However, in accordance with Article 6(1) ITS 2024/2956, the parent undertaking of financial entities that are part of a group should determine the entities to be included in the register of information at sub-consolidated and consolidated level.

To reduce administrative costs of groups, groups should have the possibility to develop a single register of information at entity, sub-consolidated and consolidated levels in relation to all contractual arrangements on the use of ICT services provided by ICT third-party service providers to all the financial entities that are part of that group. In such cases, the single register of information should allow each financial entity to comply with its obligation to maintain and update the register of information at entity and sub- consolidated level, where applicable, including its reporting to its competent authority.