# DORA Reporting in Cyprus: Competent Authorities Guide for Financial Entities

Source: https://www.cyadviso.com/dora-cyprus-competent-authorities
Last reviewed: 2026-05-01
Country: Cyprus (CY)
Tags: DORA, Cyprus

Cyprus splits DORA supervision between Central Bank of Cyprus, CySEC and the Superintendent of Insurance: scope by entity type, ICT reporting and evidence pack.

---

## Short answer

In Cyprus, the relevant DORA competent authority depends on the authorisation and entity type: the Central Bank of Cyprus (CBC) for credit institutions and certain payment / e-money services, the Cyprus Securities and Exchange Commission (CySEC) for investment firms and MiCA-authorised CASPs, and the Superintendent of Insurance for (re)insurance undertakings.

## Competent authorities

- **Central Bank of Cyprus (CBC)** (CBC) — https://www.centralbank.cy/en/home
- **Cyprus Securities and Exchange Commission (CySEC)** (CySEC) — https://www.cysec.gov.cy/en-GB/home/
- **Superintendent of Insurance — Ministry of Finance** (Superintendent of Insurance) — https://www.gov.cy/mof/en/insurance-companies-control-service/

## Entities in scope

- Credit institutions (banks)
- Payment institutions and electronic money institutions (PIs / EMIs)
- Investment firms
- Crypto-asset service providers (CASPs) authorised under MiCA
- Insurance and reinsurance undertakings, where supervised in this jurisdiction
- Other financial entities listed in DORA Article 2

## Jurisdictional nuances

- CySEC is a high-volume supervisor for investment firms and crypto-asset service providers; many MiCA / DORA programmes for Cyprus-based fintechs run on the CySEC track.
- Group structures with both an investment firm (CySEC) and a payment / EMI entity (CBC) need to align reporting cadences and evidence packs across two supervisors.
- Cypriot supervisors have historically engaged actively with EBA / ESMA convergence work, so DORA evidence often references the same EBA guidelines you already maintain.

## Primary sources

- Central Bank of Cyprus — homepage — https://www.centralbank.cy/en/home
- CySEC — Cyprus Securities and Exchange Commission — https://www.cysec.gov.cy/en-GB/home/
- Superintendent of Insurance — Ministry of Finance — https://www.gov.cy/mof/en/insurance-companies-control-service/
- Regulation (EU) 2022/2554 — DORA, EUR-Lex — https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32022R2554
- European Banking Authority — Digital Operational Resilience Act (DORA) — https://www.eba.europa.eu/activities/direct-supervision-and-oversight/digital-operational-resilience-act

---

Canonical HTML: https://www.cyadviso.com/dora-cyprus-competent-authorities
Authored by Andrey Gubarev — CISO for EU fintechs (CISM, CDPSE, SABSA).
CyAdviso · DORA / ICT risk / vCISO programmes for EU-licensed fintechs.