Independent thinking. Informed defence.

CISO Times

Intelligence for the people behind the defence.

The CISO Decision Brief

Article 48Cooperation between authorities

1. Competent authorities shall cooperate closely among themselves and, where applicable, with the Lead Overseer.

2. Competent authorities and the Lead Overseer shall, in a timely manner, mutually exchange all relevant information concerning critical ICT third-party service providers which is necessary for them to carry out their respective duties under this Regulation, in particular in relation to identified risks, approaches and measures taken as part of the Lead Overseer’s oversight tasks.

DORA, the European Union regulation on digital operational resilience, Article 48

Two duties of cooperation. Competent authorities must cooperate closely among themselves and, where applicable, with the Lead Overseer. They and the Lead Overseer must also exchange in good time all relevant information about critical ICT third-party service providers that each needs for its duties, in particular on identified risks and the approaches and measures taken as part of the Lead Overseer’s oversight.

The exchange runs in both directions, and is limited to what is relevant and necessary for each authority’s duties. It supports the follow-up in Article 42, including the supervisory measures that can follow if recommendations are not addressed.

Text: Regulation (EU) 2022/2554, as published in the Official Journal of the European Union, from EUR-Lex. Only the Official Journal text is authentic.