{"id":36606,"date":"2026-04-26T09:20:25","date_gmt":"2026-04-26T09:20:25","guid":{"rendered":"https:\/\/buvei.com\/blog\/?p=36606"},"modified":"2026-04-26T09:20:25","modified_gmt":"2026-04-26T09:20:25","slug":"eu-regulators-designate-19-critical-ict-providers-under-dora","status":"publish","type":"post","link":"https:\/\/buvei.com\/blog\/eu-regulators-designate-19-critical-ict-providers-under-dora\/","title":{"rendered":"EU Regulators Designate 19 Critical ICT Providers Under DORA"},"content":{"rendered":"<p data-path-to-node=\"4\"><b data-path-to-node=\"4\" data-index-in-node=\"0\">Executive Summary:<\/b> In their 2025 Joint Committee report, EU regulators confirmed the full activation of DORA as of January 17, 2025. The ESAs have shifted from policy-making to active oversight, designating <b data-path-to-node=\"4\" data-index-in-node=\"207\">19 critical third-party ICT providers<\/b> for direct supervision. Simultaneously, the authorities warned that geopolitical volatility and \"faster digitalization\" necessitate a zero-tolerance approach to crypto-asset fraud and AI-driven scams.<\/p>\n<h2 data-path-to-node=\"6\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-36628\" src=\"https:\/\/wordpress.buvei.com\/wp-content\/uploads\/2026\/04\/\u672a\u547d\u540d\u7684\u8bbe\u8ba1-66-1.webp\" alt=\"\" width=\"1600\" height=\"896\" srcset=\"https:\/\/wordpress.buvei.com\/wp-content\/uploads\/2026\/04\/\u672a\u547d\u540d\u7684\u8bbe\u8ba1-66-1.webp 1600w, https:\/\/wordpress.buvei.com\/wp-content\/uploads\/2026\/04\/\u672a\u547d\u540d\u7684\u8bbe\u8ba1-66-1-300x168.webp 300w, https:\/\/wordpress.buvei.com\/wp-content\/uploads\/2026\/04\/\u672a\u547d\u540d\u7684\u8bbe\u8ba1-66-1-1024x573.webp 1024w, https:\/\/wordpress.buvei.com\/wp-content\/uploads\/2026\/04\/\u672a\u547d\u540d\u7684\u8bbe\u8ba1-66-1-768x430.webp 768w, https:\/\/wordpress.buvei.com\/wp-content\/uploads\/2026\/04\/\u672a\u547d\u540d\u7684\u8bbe\u8ba1-66-1-1536x860.webp 1536w, https:\/\/wordpress.buvei.com\/wp-content\/uploads\/2026\/04\/\u672a\u547d\u540d\u7684\u8bbe\u8ba1-66-1-400x224.webp 400w, https:\/\/wordpress.buvei.com\/wp-content\/uploads\/2026\/04\/\u672a\u547d\u540d\u7684\u8bbe\u8ba1-66-1-800x448.webp 800w, https:\/\/wordpress.buvei.com\/wp-content\/uploads\/2026\/04\/\u672a\u547d\u540d\u7684\u8bbe\u8ba1-66-1-832x466.webp 832w, https:\/\/wordpress.buvei.com\/wp-content\/uploads\/2026\/04\/\u672a\u547d\u540d\u7684\u8bbe\u8ba1-66-1-1248x699.webp 1248w\" sizes=\"auto, (max-width: 1600px) 100vw, 1600px\" \/>DORA: The End of \"<a href=\"https:\/\/buvei.com\/blog\/fix-fraud-declines-in-freshbooks-with-virtual-cards\/\">Infrastructure Blind Spots<\/a>\"<\/h2>\n<p data-path-to-node=\"7\">The application of the Digital Operational Resilience Act (DORA) in early 2025 has fundamentally changed how EU financial firms manage their technology stacks.<\/p>\n<ul data-path-to-node=\"8\">\n<li>\n<p data-path-to-node=\"8,0,0\"><b data-path-to-node=\"8,0,0\" data-index-in-node=\"0\">Critical Provider Oversight:<\/b> Between April and November 2025, the ESAs designated 19 ICT providers (likely including major cloud and data analytics firms) as \"critical.\" These entities are now under the direct supervision of the European Banking Authority (EBA).<\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"8,1,0\"><b data-path-to-node=\"8,1,0\" data-index-in-node=\"0\">Information Sharing (CITE):<\/b> The launch of the <b data-path-to-node=\"8,1,0\" data-index-in-node=\"46\">Cyber Incident Information Sharing and Threat Intelligence Exchange (CITE)<\/b> allows EU firms to share real-time data on cyber threats, creating a \"communal shield\" against systemic ICT failures.<\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"8,2,0\"><b data-path-to-node=\"8,2,0\" data-index-in-node=\"0\">Compliance for Brokers:<\/b> For retail brokers, DORA now requires strict verification of every software component in their infrastructure. Failure to maintain \"reliable security maintenance\" of open-source or third-party tools is now a direct regulatory violation.<\/p>\n<\/li>\n<\/ul>\n<h2 data-start=\"1124\" data-end=\"1167\"><a href=\"https:\/\/buvei.com\/?s=blog\"><img loading=\"lazy\" decoding=\"async\" class=\"size-full wp-image-28870 aligncenter\" src=\"https:\/\/wordpress.buvei.com\/wp-content\/uploads\/2026\/01\/buvei-4.png\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" srcset=\"https:\/\/wordpress.buvei.com\/wp-content\/uploads\/2026\/01\/buvei-4.png 1024w, https:\/\/wordpress.buvei.com\/wp-content\/uploads\/2026\/01\/buvei-4-300x90.png 300w, https:\/\/wordpress.buvei.com\/wp-content\/uploads\/2026\/01\/buvei-4-768x230.png 768w, https:\/\/wordpress.buvei.com\/wp-content\/uploads\/2026\/01\/buvei-4-400x120.png 400w, https:\/\/wordpress.buvei.com\/wp-content\/uploads\/2026\/01\/buvei-4-800x240.png 800w, https:\/\/wordpress.buvei.com\/wp-content\/uploads\/2026\/01\/buvei-4-832x249.png 832w\" alt=\"\" width=\"1024\" height=\"307\" \/><\/a><\/h2>\n<h2 data-path-to-node=\"10\">Crypto Risks and <a href=\"https:\/\/buvei.com\/blog\/virtual-cards-and-bnpl-in-2025-the-next-step-in-consumer-payments\/\">Consumer Protection<\/a><\/h2>\n<p data-path-to-node=\"11\">Despite the rollout of MiCA (Markets in Crypto-Assets), EU regulators remain highly cautious regarding the retail digital asset space.<\/p>\n<ul data-path-to-node=\"12\">\n<li>\n<p data-path-to-node=\"12,0,0\"><b data-path-to-node=\"12,0,0\" data-index-in-node=\"0\">Limited Legal Protection:<\/b> The ESAs reiterated that depending on the asset type, many crypto-investors still have \"limited legal protection\" in the event of platform failures.<\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"12,1,0\"><b data-path-to-node=\"12,1,0\" data-index-in-node=\"0\">Anti-Fraud Offensive:<\/b> The report highlighted a surge in <b data-path-to-node=\"12,1,0\" data-index-in-node=\"56\">AI-driven scams<\/b> and crypto fraud. In 2025, the ESAs issued 12 administrative sanctions across Belgium, Denmark, Hungary, and Poland related to PRIIPs (Packaged Retail and Insurance-based Investment Products) and consumer protection failures.<\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"12,2,0\"><b data-path-to-node=\"12,2,0\" data-index-in-node=\"0\">Finfluencer Crackdown:<\/b> Coordination with 16 international regulators led to action against \"finfluencers,\" with over <b data-path-to-node=\"12,2,0\" data-index-in-node=\"117\">1,267 illegal ads<\/b> removed that had reached an estimated 2.3 million UK and EU users.<\/p>\n<\/li>\n<\/ul>\n<h2 data-path-to-node=\"14\">Regulatory \"Simplification\" Without Compromise<\/h2>\n<p data-path-to-node=\"15\">A key theme of the 2025 report is the European Commission\u2019s push to simplify financial reporting, though the ESAs insist this will not weaken the system.<\/p>\n<ul data-path-to-node=\"16\">\n<li>\n<p data-path-to-node=\"16,0,0\"><b data-path-to-node=\"16,0,0\" data-index-in-node=\"0\">PRIIPs &amp; KIDs:<\/b> Work continues on streamlining the <b data-path-to-node=\"16,0,0\" data-index-in-node=\"50\">Key Information Document (KID)<\/b> to make risk disclosures more digestible for retail traders without removing essential data.<\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"16,1,0\"><b data-path-to-node=\"16,1,0\" data-index-in-node=\"0\">SFDR Adjustments:<\/b> To reduce the \"reporting burden,\" the ESAs deprioritized one annual report under the Sustainable Finance Disclosure Regulation (SFDR), aiming for a \"proportionate and forward-looking\" framework.<\/p>\n<\/li>\n<\/ul>\n<h2 data-path-to-node=\"18\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-36629\" src=\"https:\/\/wordpress.buvei.com\/wp-content\/uploads\/2026\/04\/\u672a\u547d\u540d\u7684\u8bbe\u8ba1-67-1.webp\" alt=\"\" width=\"1600\" height=\"896\" srcset=\"https:\/\/wordpress.buvei.com\/wp-content\/uploads\/2026\/04\/\u672a\u547d\u540d\u7684\u8bbe\u8ba1-67-1.webp 1600w, https:\/\/wordpress.buvei.com\/wp-content\/uploads\/2026\/04\/\u672a\u547d\u540d\u7684\u8bbe\u8ba1-67-1-300x168.webp 300w, https:\/\/wordpress.buvei.com\/wp-content\/uploads\/2026\/04\/\u672a\u547d\u540d\u7684\u8bbe\u8ba1-67-1-1024x573.webp 1024w, https:\/\/wordpress.buvei.com\/wp-content\/uploads\/2026\/04\/\u672a\u547d\u540d\u7684\u8bbe\u8ba1-67-1-768x430.webp 768w, https:\/\/wordpress.buvei.com\/wp-content\/uploads\/2026\/04\/\u672a\u547d\u540d\u7684\u8bbe\u8ba1-67-1-1536x860.webp 1536w, https:\/\/wordpress.buvei.com\/wp-content\/uploads\/2026\/04\/\u672a\u547d\u540d\u7684\u8bbe\u8ba1-67-1-400x224.webp 400w, https:\/\/wordpress.buvei.com\/wp-content\/uploads\/2026\/04\/\u672a\u547d\u540d\u7684\u8bbe\u8ba1-67-1-800x448.webp 800w, https:\/\/wordpress.buvei.com\/wp-content\/uploads\/2026\/04\/\u672a\u547d\u540d\u7684\u8bbe\u8ba1-67-1-832x466.webp 832w, https:\/\/wordpress.buvei.com\/wp-content\/uploads\/2026\/04\/\u672a\u547d\u540d\u7684\u8bbe\u8ba1-67-1-1248x699.webp 1248w\" sizes=\"auto, (max-width: 1600px) 100vw, 1600px\" \/>Global Market Context: Volatility as the New Normal<\/h2>\n<p data-path-to-node=\"19\">The ESAs warned that the market environment in 2026 is defined by \"geopolitical uncertainty and trade restrictions.\"<\/p>\n<table style=\"height: 202px;\" width=\"995\" data-path-to-node=\"20\">\n<thead>\n<tr>\n<td><strong>Risk Factor<\/strong><\/td>\n<td><strong>Regulatory Stance<\/strong><\/td>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td><a href=\"https:\/\/buvei.com\/blog\/pay360-2026-london-global-payments-event\/\"><strong>Market Volatility<\/strong><\/a><\/td>\n<td><span data-path-to-node=\"20,1,1,0\">Institutions must enhance resilience to \"market shocks.\"<\/span><\/td>\n<\/tr>\n<tr>\n<td><span data-path-to-node=\"20,2,0,0\"><b data-path-to-node=\"20,2,0,0\" data-index-in-node=\"0\">ICT Concentration<\/b><\/span><\/td>\n<td><span data-path-to-node=\"20,2,1,0\">High reliance on a few \"Critical Providers\" is a systemic risk.<\/span><\/td>\n<\/tr>\n<tr>\n<td><span data-path-to-node=\"20,3,0,0\"><b data-path-to-node=\"20,3,0,0\" data-index-in-node=\"0\">Non-Bank Finance<\/b><\/span><\/td>\n<td><span data-path-to-node=\"20,3,1,0\">Increased monitoring of shadow banking and fintech lenders.<\/span><\/td>\n<\/tr>\n<tr>\n<td><span data-path-to-node=\"20,4,0,0\"><b data-path-to-node=\"20,4,0,0\" data-index-in-node=\"0\">Supervisory Data<\/b><\/span><\/td>\n<td><span data-path-to-node=\"20,4,1,0\">Launch of a new exchange system to track cross-border market shifts.<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2 data-start=\"1124\" data-end=\"1167\"><a href=\"https:\/\/buvei.com\/?s=blog\"><img loading=\"lazy\" decoding=\"async\" class=\"size-full wp-image-28870 aligncenter\" src=\"https:\/\/wordpress.buvei.com\/wp-content\/uploads\/2026\/01\/buvei-4.png\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" srcset=\"https:\/\/wordpress.buvei.com\/wp-content\/uploads\/2026\/01\/buvei-4.png 1024w, https:\/\/wordpress.buvei.com\/wp-content\/uploads\/2026\/01\/buvei-4-300x90.png 300w, https:\/\/wordpress.buvei.com\/wp-content\/uploads\/2026\/01\/buvei-4-768x230.png 768w, https:\/\/wordpress.buvei.com\/wp-content\/uploads\/2026\/01\/buvei-4-400x120.png 400w, https:\/\/wordpress.buvei.com\/wp-content\/uploads\/2026\/01\/buvei-4-800x240.png 800w, https:\/\/wordpress.buvei.com\/wp-content\/uploads\/2026\/01\/buvei-4-832x249.png 832w\" alt=\"\" width=\"1024\" height=\"307\" \/><\/a><\/h2>\n","protected":false},"excerpt":{"rendered":"Executive Summary: In their 2025 Joint Committee report, EU regulators confirmed the full activation of DORA as of&hellip;","protected":false},"author":4,"featured_media":36629,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"csco_singular_sidebar":"","csco_page_header_type":"","csco_page_load_nextpost":""},"categories":[2516,6,1],"tags":[4859,4815,4893,618],"class_list":{"0":"post-36606","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-case-studies","8":"category-news","9":"category-payment-basics","10":"tag-instant-card-issuance","11":"tag-online-payment-security","12":"tag-usdt-top-up","13":"tag-virtual-cards","14":"cs-entry"},"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/buvei.com\/blog\/wp-json\/wp\/v2\/posts\/36606","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/buvei.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/buvei.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/buvei.com\/blog\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/buvei.com\/blog\/wp-json\/wp\/v2\/comments?post=36606"}],"version-history":[{"count":0,"href":"https:\/\/buvei.com\/blog\/wp-json\/wp\/v2\/posts\/36606\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/buvei.com\/blog\/wp-json\/wp\/v2\/media\/36629"}],"wp:attachment":[{"href":"https:\/\/buvei.com\/blog\/wp-json\/wp\/v2\/media?parent=36606"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/buvei.com\/blog\/wp-json\/wp\/v2\/categories?post=36606"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/buvei.com\/blog\/wp-json\/wp\/v2\/tags?post=36606"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}