Back to templates
    Template

    Register of information starter

    A five-sheet starter that mirrors the standard templates for the register of information, so the function, arrangement and provider data is collected once.

    Compliance5 Sept 20263 min read

    Commission Implementing Regulation (EU) 2024/2956Regulation (EU) 2022/2554
    On this page
    Download the template

    register-of-information.xlsx · 12 kBLicensed CC BY 4.0

    What this is

    A five-sheet workbook mirroring the standard templates in Annex I of Commission Implementing Regulation (EU) 2024/2956 1. Function, arrangement and provider data is collected once, in the shape those templates need. It is the artefact produced by sections 3.8 and 3.9 of DORA implementation, and supports one decision per row: does this arrangement sit behind a critical or important function.

    It is not a replacement for the standard templates, and not a submission format. The submission format is the authority's to set; this file is the working layer underneath.

    How to use it

    1. Delete every row marked EXAMPLE - delete. Three appear on each working sheet.
    2. Fill Functions first. The criticality decision belongs to the function, not the contract. See the playbook, section 3.4.
    3. Work the Template map so each Annex I template has an owner role and a source system before data is collected.
    4. Fill Arrangements next, one row each, pointing at a function identifier. See the playbook, section 3.8.
    5. Fill Providers last, including subcontractors that effectively underpin critical or important functions 2.
    6. Resolve the closed-option columns before writing free text. Reliance, substitutability and criticality each take a value from a fixed list.
    7. Identify every provider that is a legal person by a valid and active LEI or EUID, and by both where both exist 3.
    8. Keep one value per data element, so a second valid value needs a second row 4. See section 3.9.

    Sheets and columns

    SheetMirrorsColumns
    Read firstLicence, scope, identifier and closed-option rules
    Template mapAnnex IThe fifteen codes and titles, in order
    FunctionsB_06.01Identifier, activity, name, criticality, objectives
    ArrangementsB_02.01, B_02.02Reference, type, function, dates, notice, law, locations
    ProvidersB_05.01, B_05.02, B_02.02, B_07.01Code and type, name, country, Rank, reliance, substitutability, exit plan

    Column names are as printed in the Implementing Regulation; ID is a local key, not part of it.

    What good looks like

    Six columns from the Providers sheet, example prefix dropped.

    IDIdentification codeType of codeRankSubstitutabilityExistence of an exit plan
    PR-0011111AAAA2222BBBB3301LEI11. Not substitutable1. Yes
    PR-0021111AAAA2222BBBB3302LEI22. Highly complex substitutability1. Yes
    PR-0031111AAAA2222BBBB3303LEI14. Easily substitutable2. No

    Two things make those rows usable. Rank places each provider in one chain, so a subcontractor is visible rather than implied. Substitutability is a closed-list value, so two readers cannot disagree about it.

    Fields

    FieldRequiredMeaningCommon mistake
    Function IdentifieryesThe key every arrangement points atCreating it after the contract rows
    Criticality or importance assessmentyesThe decision, from a closed listCopying a procurement tier
    Identification code, Type of codeyesLEI or EUID for a legal personA local vendor number
    RankyesPosition in the supply chainLeaving subcontractors out
    Level of reliance, SubstitutabilityyesClosed-list assessmentsFree text nobody can compare
    Existence of an exit planyesWhether a plan existsRecording intent, not a plan

    Download

    • File: register-of-information.xlsx (xlsx, 12 KB) — five sheets.
    • Markdown variant: the same tables at content/templates/assets/_register-of-information.md.
    • Licence: CC BY 4.0 — reuse and adapt with attribution to GRCIDE.
    • Version: 1.0, 2026-09-05. No personal data, no organisation names; example rows are invented.

    References

    1. European Commission. Commission Implementing Regulation (EU) 2024/2956. https://eur-lex.europa.eu/eli/reg_impl/2024/2956/oj/eng 5
    2. European Parliament and Council. Regulation (EU) 2022/2554 (DORA). https://eur-lex.europa.eu/eli/reg/2022/2554/oj/eng 6

    Standards and certification names are the property of their respective owners. GRCIDE is an independent publication and is not affiliated with, authorized, sponsored or endorsed by any standards body.

    Sources

    1. 1EU Publications Office CELEX 32024R2956 Annex I · verified 2026-09-05
    2. 2EU Publications Office CELEX 32024R2956 Art. 3(2) · verified 2026-09-05
    3. 3EU Publications Office CELEX 32024R2956 Art. 3(5) · verified 2026-09-05
    4. 4EU Publications Office CELEX 32024R2956 Art. 4 · verified 2026-09-05
    5. 5EU Publications Office CELEX 32024R2956 · verified 2026-09-05
    6. 6EU Publications Office CELEX 32022R2554 · verified 2026-09-05