CySEC Sets Fees for DORA Regulation

The Cyprus Securities and Exchange Commission (CySEC) has announced Policy Statement DP-03-2025 regarding fees for financial entities subject to the DORA (Digital Operational Resilience Act) regulation.

The annual supervision fee will range from €2,000 to €20,000, depending on the size of the entity, while the assessment fee for Threat-Led Penetration Testing (TLPT) is set at €20,000.

For 2025, entities must submit a Category Declaration between October 2–31, 2025, and pay the annual fee by December 31, 2025.

Dr. George Theocharides, Chairman of CySEC, emphasized that the fees align with DORA's proportionality criteria and the goal of reducing reliance on public funding.