meta_id 3288316

On July 1, 2026, the Central Bank of Iceland (Seðlabanki Íslands) submitted documentation regarding a review of its information and communications technology (ICT) risk management framework under the Digital Operational Resilience Act (DORA). The submission represents Iceland's compliance with DORA requirements, which establish harmonised standards for managing ICT-related operational risks across the financial sector. DORA requires financial institutions and competent authorities to implement robust governance structures, incident reporting protocols, and testing frameworks to ensure digital operational resilience. The Central Bank of Iceland's submission of documentation for this review demonstrates its commitment to aligning its ICT risk management practices with European Union regulatory standards applicable to Icelandic financial services. The framework review covers the Central Bank of Iceland's policies, procedures, and controls governing information security, business continuity, incident management, and third-party ICT service provider oversight. This assessment ensures the institution maintains adequate safeguards against cyber threats, system failures, and other digital operational risks that could compromise financial stability or market integrity. The documentation submission marks a key milestone in Iceland's implementation of DORA requirements. Financial institutions operating in Iceland should monitor guidance from the Central Bank of Iceland regarding compliance expectations and any subsequent regulatory updates or clarifications on ICT risk management standards. The Central Bank of Iceland may issue further circulars or guidance documents detailing specific compliance obligations for regulated entities. REFERENCES: Central Bank of Iceland. "Skil á gögnum vegna úttektar á áhættustýringarramma fyrir upplýsinga- og fjarskiptatækni samkvæmt DORA." July 1, 2026. https://www.cb.is/