Challenges in Compiling the Register of Information

This article is a technical report that examines the complexities and challenges faced by European financial entities in compiling the Register of Information as mandated by the Digital Operational Resilience Act (DORA). The report outlines the requirements for maintaining and reporting a dataset that details Information & Communication Technology (ICT) contractual arrangements. It discusses the intricate nature of these requirements, emphasizing the need for firms to have a thorough understanding of their ICT service supply chain. The report highlights the anticipated reporting deadlines and the necessity for firms to rethink their approach to third-party inclusion in the Register. It also details the importance of data integrity, the challenges of capturing accurate information, and the need for collaboration across business lines to assess risks. Furthermore, the report summarizes insights from a workshop hosted by the European Supervisory Authorities, which provided guidance on preparing the Register and emphasized the significance of data quality and compliance with submission timelines.