Skip to main content
DORA Auditor

Article 34: Operational coordination between Lead Overseers

Last updated: 1 authoritative sourceDORA Auditor Editorial Team

Article 34 requires the Lead Overseers appointed under Article 31(1)(b) to set up a Joint Oversight Network and draw up a common oversight protocol so that oversight of the same critical ICT third-party provider stays consistent when more than one Lead Overseer is involved, with the ECB and ENISA available for ad-hoc technical advice.

Chapter V, Managing of ICT third-party risk · Pillar: ICT Third-Party Risk

Key points

  • Lead Overseers set up a Joint Oversight Network to coordinate day-to-day oversight
  • A common oversight protocol sets the procedures for swift exchanges and reactions
  • The ECB and ENISA can be called on, on an ad-hoc basis, for technical advice

How this fits DORA

Article 34 sits within the ICT Third-Party Risk pillar. For the full set of obligations and how they interlock, see the DORA requirements overview.

Read the official text

This is an editorial summary. Read the binding text of Article 34 in the consolidated regulation on EUR-Lex.

Sources

  1. Regulation (EU) 2022/2554 (DORA), EUR-Lex