Source: OJ L, 2024/2956, 2.12.2024

Current language: EN

Article 2 Ranking of ICT third-party providers in the supply chain


  1. Financial entities shall assign a rankmeans the position of an ICT third-party service provider in the ICT service supply chain. to each ICT third-party service providermeans an undertaking providing ICT services;. The rankmeans the position of an ICT third-party service provider in the ICT service supply chain. shall be any natural number higher or equal to ‘1’ where the lower the natural number assigned to the rankmeans the position of an ICT third-party service provider in the ICT service supply chain., the closer the arrangement is to the financial entity.

  2. The rankmeans the position of an ICT third-party service provider in the ICT service supply chain. of the direct ICT third-party service providermeans an ICT third-party service provider or ICT intra-group service provider that signed a contractual arrangement with:a financial entity to provide its ICT services directly to that financial entity;a financial or a non-financial entity to provide its services to other financial entities within the same group; in the ICT service supply chainmeans a sequence of contractual arrangements connected with the ICT service being provided by the direct ICT third-party service provider to the financial entity, starting with the direct ICT third-party service provider which has one or multiple other ICT third-party service providers as counterparties (subcontractors); shall always be ‘1’.

  3. The rankmeans the position of an ICT third-party service provider in the ICT service supply chain. of the subcontractor in the ICT service supply chainmeans a sequence of contractual arrangements connected with the ICT service being provided by the direct ICT third-party service provider to the financial entity, starting with the direct ICT third-party service provider which has one or multiple other ICT third-party service providers as counterparties (subcontractors); shall always be higher than ‘1’.

We're continuously improving our platform to serve you better.

Your feedback matters! Let us know how we can improve.

Found a bug?

Springflod is a Swedish boutique consultancy firm specialising in cyber security within the financial services sector.

We offer professional services concerning information security governance, risk and compliance.

Crafted with ❤️ by Springflod