Key facts
- Eiopa is facing accusations of double standards over its handling of an IT security audit.
- The audit revealed weaknesses in Eiopa's data and IT security management practices.
- Eiopa is responsible for overseeing critical technology vendors designated under DORA.
The European Insurance and Occupational Pensions Authority (Eiopa) is facing accusations of double standards concerning its management of an audit report that identified weaknesses in its data and IT security practices. Eiopa is one of three supervisory agencies responsible for directly overseeing 19 critical technology vendors, including major players like Amazon, Google, and Microsoft, under the Digital Operational Resilience Act (DORA).
The criticism stems from the perceived discrepancy between Eiopa's role in enforcing IT security standards for critical vendors and the findings of an internal audit regarding its own security management. The specifics of the audit's findings and the exact nature of the perceived double standards were not detailed in the provided text.