
On the 15th of July 2025, the European Supervisory Authorities (the European Banking Authority, the European Insurance and Occupational Pensions Authority, and the European Securities and Markets Authority – the ESAs) published a guide on oversight activities under Regulation 2022/2554/EU (DORA). The guide provides an overview of the founding principles, the governance structure, the available tools and the oversight processes, including high-level explanations to external stakeholders concerning the critical information and communication technology (ICT) third-party service providers (CTPPs) oversight framework. The ESAs invite the public, financial entities and third-party providers to use this guide to prepare for the oversight implementation.