We recently co-signed the Centre for Democracy & Technology Europe's civil society statement, which calls for enhanced and meaningful transparency from VLOP and VLOSE risk assessments as a mandatory facet of the Digital Services Act. Our shared statement first demands that VLOPs and VLOSEs publish detailed methodologies for their risk assessments, outlining precisely how they have been conducted, as well as their scope and the definitions that they adopt in regard to understanding systemic risks. We also call for a wider range of considerations that include: publishing the full list of risks that have been identified through assessment; publishing the full list of measures taken to address identified risks; and detailing, with full transparency, the involvement of internal departments and external stakeholders in the completion of all risk assessments. The statement and its co-signatories can be found in its entirety here: https://lnkd.in/eC52Vewq
AI Forensics’ Post
More Relevant Posts
-
Some good clarity on this issue https://lnkd.in/eag9hF-u
-
Compliance, IT & Data Governance Aficionado • Head of Compliance • Lawyer / CIA / Cert CII
Good to finally have clarity about ICT services between FEs, which is bound to also affect intragroup ICT services in certain cases. A pity that such clarity was only provided after go-live.
Read our insights on the European Commission's latest guidance on the definition of 'ICT services' under DORA. With Pierre Berger and Pieter Van Noten.
-
It is a short 7 days until the final drafts of the Regulatory Technical Standards (RTS’s) are set to be released to the general public by the European Supervisory Authorities (ESA’s) . In these the ESA’s will focus on: Technical standards on content, timelines and templates on incident reporting Guidance on aggregated costs and losses from major incidents Technical standards on subcontracting of critical or important functions Technical stands on oversight on harmonization Oversight cooperation between ESAs and competent authorities Technical standards on threat-led penetration testing (TLPT) It will be interesting to see the final text when it comes out, especially around the testing standards. With the need to be compliant by January 17th, 2025. It leaves less than 190 days to ensure your firm is ready. Head over to our blog to read more about how certain regulators are already making DORA a focus in their communications with the firms in their domain. https://lnkd.in/eMyXiBJY Want to know more? Reach out to us via the contact us button and we will schedule some time to chat about how we can help your firm on their compliance journey.
-
Associate Professor in Communication Policy and Politics at the University of East Anglia; Academic Co-Director, CERRE
This is a very useful piece, especially the initial diagram of the process and the point about the need to collect data and not just access data processed by the VLOPSEs.
Ulrike Klinger, Jakob Ohme and my piece on the draft delegated act for non-public data access in #DSA40 is now featured on Tech Policy Press! In it, we argue that for systemic risk mitigation to work, access must be reliable & accessible. The draft is a good start, but doesn't ensure these foundations of risk governance. Read here: https://lnkd.in/e9wrpC9u Do you agree? If so, you can still submit feedback until next Tuesday (10 December) - the more people call for a solid foundation for data access, the better! And while you're at it, make sure to follow our project, the DSA 40 Data Access Collaboratory!
-
-
Ulrike Klinger, Jakob Ohme and my piece on the draft delegated act for non-public data access in #DSA40 is now featured on Tech Policy Press! In it, we argue that for systemic risk mitigation to work, access must be reliable & accessible. The draft is a good start, but doesn't ensure these foundations of risk governance. Read here: https://lnkd.in/e9wrpC9u Do you agree? If so, you can still submit feedback until next Tuesday (10 December) - the more people call for a solid foundation for data access, the better! And while you're at it, make sure to follow our project, the DSA 40 Data Access Collaboratory!
-
-
Trustworthy & experienced global AI Management and Governance coach & advisor for Boards & C-suite, years of experience reviewing AI 💫 100 Brilliant Women in AI Ethics (2024), World AI Summit Top 75 AI Innovators (2023)
Great contribution. Two of of the biggest challenges are a) aligning risk appetites and company values to #AIIA, and b) aligning multiple reviews to reflect a)
Global data privacy professional, ever curious privacy & technology educator, digital rights advocate and GRC executive.
Algorithmic Impact Assessments - consistency, maturity missing What challenges do technology, privacy and data governance practitioners face when implementing Algorithmic Impact Assessments, for example, the lack of standardisation on AIAs? In the following paper published by Amar Ashar and co-authors in the Journal of Online Trust and Safety found that: "Our research underscores the importance of framing AIAs not as checklists...but as dynamic tools that evolve in response to the unique challenges and needs of the practitioners who interact with them." "We find that the challenges practitioners encounter can be grouped into three categories: technical and methods, infrastructure and operations, and resourcing and prioritization. We also describe ways for teams to more effectively mitigate concerns. This paper helps bridge gaps between the theory and practice of AIAs, advances a better understanding of the potential harms of algorithmic systems, and informs assessment practices to serve their intended purpose. Here is the link: https://lnkd.in/gAwrA2Eu
-
Cyber Security | Penetration Testing | Data Privacy | Managed Security Services | Cloud Security | 24x7 SOC
We're less than three months away from DORA coming into effect for financial service and ICT organisations. In this e-guide, we cover what is included in the legislation, how it will impact your organisation, and what you can do to prepare. Read our E-guide here 👉 https://lnkd.in/eRGgWQNC
-
Very large online platforms and search engines to publish first risk assessment and audit reports under the Digital Services Act #DSA https://lnkd.in/d4aENQj4
-
Senior Regulatory Advisor | Board Experience | Government/ Regulatory Affairs | Regulatory Change | Governance/ Risk | Former Regulator | Digital Assets | Banking / Capital Markets | Asset Management | (Re) Insurance
The dry run aims to prepare financial entities for compliance with the Digital Operational Resilience Act (DORA) by testing their ability to create and submit a register of information on their contractual arrangements with ICT third-party providers. Timeline: The dry run will occur in the second half of 2024, with a deadline for submission by August 30th. Participants: All financial entities within the scope of DORA are encouraged to participate. Support Provided: The ESAs will provide participants with tools and resources, including a draft data point model, CSV specifications, instructions, and an Excel template. Feedback: Participants will receive individual feedback on their data quality and a cleaned register of information dataset. The ESAs will also publish a report with general findings and hold a workshop to share lessons learned. Firm Implications: Preparation: Firms should start preparing their information registers now, using the tools and resources provided by the ESAs. Data Quality: Firms should focus on ensuring the accuracy and completeness of their data, as this will be a crucial focus of the dry run. Internal Processes: The dry run can help firms identify and improve their internal processes for collecting and managing ICT third-party provider data. Regulatory Compliance: Participation in the dry run will demonstrate a proactive approach to regulatory compliance and help firms prepare for the official DORA reporting requirements in 2025. Learning Opportunity: The feedback from the ESAs and the lessons learned workshop will provide valuable insights for firms to refine their approach to ICT risk management and operational resilience further. Overall, the dry run presents a valuable opportunity for firms to test their readiness for DORA compliance and gain valuable feedback from regulators. By actively participating, firms can identify and address potential issues early, ensuring a smoother transition to the new regulatory framework. #dora https://lnkd.in/gxS-6EYD
-
Watch on Demand Gain vital insights with our "Managing Serious Contractor Incidents" webinar from our LinkSafe Legal series. Discover essential strategies for proactive preparation and legal risk management. Learn how to handle potential incidents involving contractors effectively and how to prepare for regulatory inquiries post-incident. Watch on demand now to safeguard your operations with confidence: https://ow.ly/HhSo50RbYJo
