Article 2 Ranking of ICT third-party providers in the supply chain


  1. Financial entitiesas defined in Article 2, points (a) to (t) shall assign a rank means the position of an ICT third-party service provider in the ICT service supply chain. to each ICT third-party service provider means an undertaking providing ICT services;. The rank means the position of an ICT third-party service provider in the ICT service supply chain. shall be any natural number higher or equal to ‘1’ where the lower the natural number assigned to the rank means the position of an ICT third-party service provider in the ICT service supply chain., the closer the arrangement is to the financial entity means a natural or legal person created and recognised as such under the national law of its place of establishment, which may, acting under its own name, exercise rights and be subject to obligations;.

  2. The rank means the position of an ICT third-party service provider in the ICT service supply chain. of the direct ICT third-party service provider means an ICT third-party service provider or ICT intra-group service provider that signed a contractual arrangement with: a financial entity to provide its ICT services directly to that financial entity; a financial or a non-financial entity to provide its services to other financial entities within the same group; in the ICT service supply chain means a sequence of contractual arrangements connected with the ICT service being provided by the direct ICT third-party service provider to the financial entity, starting with the direct ICT third-party service provider which has one or multiple other ICT third-party service providers as counterparties (subcontractors); shall always be ‘1’.

  3. The rank means the position of an ICT third-party service provider in the ICT service supply chain. of the subcontractor in the ICT service supply chain means a sequence of contractual arrangements connected with the ICT service being provided by the direct ICT third-party service provider to the financial entity, starting with the direct ICT third-party service provider which has one or multiple other ICT third-party service providers as counterparties (subcontractors); shall always be higher than ‘1’.

We're continuously improving our platform to serve you better.

Your feedback matters! Let us know how we can improve.

Found a bug?

Springflod is a Swedish boutique consultancy firm specialising in cyber security within the financial services sector.

We offer professional services concerning information security governance, risk and compliance.

Crafted with ❤️ by Springflod