Artikel 59 Änderungen der Verordnung (EG) Nr. 1060/2009

This article is an amending provision, meaning it does not introduce standalone rules but instead integrates DORA's requirements into the existing Credit Rating Agencies Regulation (Regulation (EC) No 1060/2009).

It does two things: it updates the organisational requirements for credit rating agencies to explicitly include ICT system management in line with DORA, and it updates the list of infringements to reflect that failure to comply with those ICT requirements constitutes a breach.

Important points:

• Credit rating agencies must manage ICT systems in accordance with DORA, alongside their existing administrative, control, and risk assessment obligations.
• Failure to meet these ICT management requirements is explicitly classified as an infringement under the Credit Rating Agencies Regulation.
• This article connects DORA to the Credit Rating Agencies Regulation, ensuring that credit rating agencies fall within DORA's broader ICT compliance framework.