Reporting Registers of Information

Financial entities subject to the Digital Operational Resilience Act (DORA) (Regulation (EU) 2022/2554) will be required to submit Registers of Information (RoIs) in relation to all contractual arrangements on the use of ICT services provided by ICT third-party service providers, which they maintain in accordance with DORA article 28(3).

Please ensure you are using the latest version of this system guide at all times as there may be periodic updates.

Based on testing performed, we are aware that RoIs will fail to be uploaded successfully to the Central Bank of Ireland Portal if basic steps have not been followed by those responsible for submitting the RoI. We therefore recap, below, the key links to be followed for guidance, while also sharing a list of common mistakes that financial entities may inadvertently make. 

Please refer to the expanded Key Points below and linked communication regarding common mistakes noted (DOCX 126.06KB).

Upcoming Submission Date

Financial entities are required to submit their RoI to the Central Bank of Ireland via the CBI Portal during the window of 1 to 4 April 2025. 

Key Points

  • The RoI should contain all data as per the ITS on RoI, as at 31 March 2025.
  • Financial entities submitting RoIs must have a valid LEI code.
  • The file type financial entities must be using is a ‘plain-csv’ (xBRL OIM-CSV) file in accordance with EBA DPM 4.0. In this regard firms are strongly encouraged to use the below link to the ESA information on how to prepare the RoI.
  • The ICT third party service providers listed in the RoI will need to have either a valid LEI code or EU-ID* in order for the files to pass validation, along with meeting the other requirements mentioned above.(* or other valid code for third country providers according to EBA FAQ  on the preparation site linked below).
  • The ESAs confirmed in their December workshop (which is recorded and available on the European Banking Authority’s (EBA) register preparation site) that a template or conversion tool would not be provided for the official submission. 
  • Financial entities must compile their RoI reporting package following the details in the ITS on the RoI, noting any clarifications in the ESAs RoI FAQ on their preparation site (linked above) and also any corrections to the ITS in the ESAs DORA QAs.
  • On that register preparation site, the ESAs also provide links to many other useful materials for financial entities preparing their RoI including but not limited to:
  • Examples of what your compiled registers should look like - sample files for taxonomy 2.0
  • Lists of possible entries in the drop down fields in the file.
  • Also in terms of how each csv should be structured, the DPM dictionary (XLSX 1.96MB) and DPM table layout and data point categorization on the same EBA preparation website guides entities and their vendors as to what should be in each of the files.
  • Further documentation on the overall EBA reporting framework 4.0 is also available.
  • When the xBRL OIM-CSV reporting package is fully prepared and checked by you, it should be saved as a .zip file. In the screen for uploading your reporting package in the Central Bank of Ireland Portal there is further information on the naming requirements for the reporting package to be submitted. More information on the upload process can be found in the system guide, linked above, on how to upload your prepared RoI to the Central Bank Portal.

Further Information

  • Financial entities should also check for further updates on DORA published on the ESAs websites, future Central Bank of Ireland updates on this page and on the Communications and Publications page of this website.

 Updated: 26 March 2025