Art. 5 Content of the register of information | ITS on register of information | DORA

This article is the primary content specification for the register of information, directly implementing the obligation established in Article 3 to use the Annex I templates.

It catalogues the full range of information categories that financial entities must populate across those templates, covering everything from basic entity identification and contractual arrangements, through to supply chain mapping, function identification, and service assessments.

It also grants financial entities the discretion to include additional information beyond what is mandated, provided it serves their own risk or contract management purposes.

Important points:

Populate the register of information with all prescribed categories of data, spanning entity details, contractual arrangements, ICT third-party service providers, supply chain structure, and assessments of services supporting critical or important functions.
The register must also capture terminology and classification systems used when completing the templates.
You may add supplementary information to the register beyond what is required, in whatever format best suits your risk or contract management needs.

1. Financial entities shall include in the register of information, in accordance with the instructions set out in Annex I, the following information:
  1. general information on the financial entity maintaining and updating the register of information at entity, sub-consolidated and consolidated level, respectively, as specified in template B_01.01 of Annex I;
  2. general information on the entities in the consolidation as specified in template B_01.02 of Annex I;
  3. identification of the branches of financial entities located outside the home country listed in template B_01.02, where applicable, as specified in template B_01.03 of Annex I;
  4. general information on the contractual arrangements as specified in template B_02.01 of Annex I;
  5. specific information on the contractual arrangements as specified in template B_02.02 of Annex I;
  6. information on the links between intra-group contractual arrangements and contractual arrangements with ICT third-party service providers which are not part of the group using the contractual reference numbers when part of the ICT service supply chain is intra-group as specified in template B_02.03 of Annex I;
  7. information on the entities signing the contractual arrangements with the direct ICT third-party service providers for receiving ICT services or on behalf of the entities using the ICT services as specified in template B_03.01 of Annex I;
  8. identification of the ICT third-party service providers signing the contractual arrangements for providing ICT services as specified in template B_03.02 of Annex I;
  9. identification of the entities signing the contractual arrangements for providing ICT services to other entities in the consolidation as specified in template B_03.03 of Annex I;
  10. information on the entities making use of the ICT services provided by the ICT third-party service providers as specified in template B_04.01 of Annex I;
  11. information on the direct ICT third-party service providers and subcontractors, as specified in template B_05.01 of Annex I;
  12. information on the ICT service supply chain, as specified in template B_05.02 of Annex I;
  13. information on the identification of functions as specified in template B_06.01 of Annex I;
  14. information on the assessment of the ICT services provided by ICT third-party service providers supporting a critical or important function or material parts thereof as specified in template B_07.01 of Annex I;
  15. information on the terminology used by financial entities and the terms included in the closed lists and classification systems used when filling in the templates as specified in template B_99.01 of Annex I.
1. Where relevant for their risk management or contract management purposes, financial entities may include into the register of information additional information in the format that is most appropriate for the purposes of such additional information.