CySEC reminded Cyprus financial institutions of DORA requirements
In Cyprus, financial institutions regulated by the Cyprus Securities and Exchange Commission (CySEC) had until the end of September 15, 2026, to submit a self-categorisation form and calculate the annual information and communication technology fee under the EU’s DORA regulation. Cyprus Mail reports.
CySEC urged financial institutions that had not yet submitted the required documents to do so through the regulator’s portal before the deadline. The reminder followed CySEC’s August 26 announcement concerning the submission of the self-categorisation form and the calculation of the annual ICT fee.
Which documents must be submitted
The requirement is based on CySEC Directive DIR73-2009-07 and Policy Statement PS-03-2025, which set out payments for financial institutions falling within the scope of DORA. Institutions must complete the grey cells in form fields 1.1–1.8 in accordance with the instructions.
Supporting documents must be provided together with the completed and properly signed form. These include extracts from the latest audited financial statements containing data on annual aggregate turnover and the annual balance sheet for the relevant period.
More current news is available on the UA.News Telegram channel Telegram.
Documents confirming the number of employees on the basis of audited statements, or a letter signed by an independent auditor confirming this figure, are also required. The submitted data are used to determine the applicable annual ICT fee under DORA.
Invoice payment deadline
After the documents are submitted, CySEC is to send an invoice to the relevant financial institution by email. It must be paid upon receipt, but no later than November 30, 2026.
DORA is an EU framework act aimed at strengthening the digital operational resilience of the financial sector. It provides for requirements concerning the management of information and communication technology risks and disruptions, as well as systems and procedures to withstand technological disruptions, respond to them and restore operations.
