Independent thinking. Informed defence.

CISO Times

Intelligence for the people behind the defence.

The CISO Decision Brief

Article 34Operational coordination between Lead Overseers

1. To ensure a consistent approach to oversight activities and with a view to enabling coordinated general oversight strategies and cohesive operational approaches and work methodologies, the three Lead Overseers appointed in accordance with Article 31(1), point (b), shall set up a JON to coordinate among themselves in the preparatory stages and to coordinate the conduct of oversight activities over their respective overseen critical ICT third-party service providers, as well as in the course of any action that may be needed pursuant to Article 42.

2. For the purposes of paragraph 1, the Lead Overseers shall draw up a common oversight protocol specifying the detailed procedures to be followed for carrying out the day-to-day coordination and for ensuring swift exchanges and reactions. The protocol shall be periodically revised to reflect operational needs, in particular the evolution of practical oversight arrangements.

3. The Lead Overseers may, on an ad-hoc basis, call on the ECB and ENISA to provide technical advice, share hands-on experience or join specific coordination meetings of the JON.

DORA, the European Union regulation on digital operational resilience, Article 34

Coordination between the three Lead Overseers. They set up a Joint Oversight Network to coordinate among themselves in the preparatory stages, in conducting oversight of their respective critical providers, and in any action needed under Article 42. The Article’s stated aim is a consistent approach to oversight: coordinated general oversight strategies and cohesive operational approaches and work methodologies.

They draw up a common oversight protocol setting out the detailed procedures for day-to-day coordination and for swift exchanges and reactions, and revise it periodically to reflect operational needs, in particular the evolution of practical oversight arrangements. On an ad hoc basis they may call on the ECB and ENISA to give technical advice, share hands-on experience or join specific coordination meetings of the Network.

The Network appears elsewhere in the Section: Lead Overseers adopt oversight plans in coordination with it (Article 33(4)), coordinate within it when exercising their powers (Article 35(2)), inform it of the outcome of information requests, investigations and inspections (Article 35(4)), and consult within it on the amount of a periodic penalty payment (Article 35(8)).

Text: Regulation (EU) 2022/2554, as published in the Official Journal of the European Union, from EUR-Lex. Only the Official Journal text is authentic.