Source: OJ L, 2024/2956, 2.12.2024

Current language: FR

Article premier Définitions


Summary What does Article 1 of the ITS on register of information say?

This is a definitions article, establishing the precise meaning of three key terms used throughout the regulation.

It lays the conceptual groundwork for understanding how ICT third-party relationships are structured and categorised, particularly in the context of maintaining the register of information required under DORA.

The three terms defined — direct ICT third-party service provider, ICT service supply chain, and rank — are foundational to the obligations set out in the subsequent articles.

Important points:

  • Understand that a "direct ICT third-party service provider" is the provider that has a contractual arrangement directly with the financial entity or with another entity on behalf of the group.
  • The "ICT service supply chain" captures the full sequence of contractual arrangements flowing from that direct provider down through any subcontractors.
  • "Rank" denotes where a given ICT third-party service provider sits within that supply chain, a concept that is operationalised further in Article 2.

Springlex's summary of the article, a reading aid, not a substitute for the legal text.

Aux fins du présent règlement, on entend par:

  1. «prestataire tiers direct de services TIC»: un prestataire tiers de services TIC ou un prestataire de services TIC intra-groupe qui a signé un accord contractuel avec:

    1. une entité financière afin de fournir ses services TIC directement à cette entité financière;

    2. une entité financière ou non financière afin de fournir ses services à d’autres entités financières du même groupe;

  2. «chaîne d’approvisionnement des services TIC»: une séquence d’accords contractuels en rapport avec le service TIC fourni par le prestataire tiers direct de services TIC à l’entité financière, commençant par le prestataire tiers direct de services TIC qui a recours à un ou plusieurs prestataires tiers de services TIC en tant que contreparties (sous-traitants);

  3. «rang»: la position d’un prestataire tiers de services TIC dans la chaîne d’approvisionnement des services TIC.

We're continuously improving our platform to serve you better.

Your feedback matters! Let us know how we can improve.

Found a bug?

Springflod is a Swedish boutique consultancy firm specialising in cyber security within the financial services sector.

We offer professional services concerning information security governance, risk and compliance.

Crafted with ❤️ by Springflod