Recital 2 Voluntary designation as critical


An ICT third-party service provider means an undertaking providing ICT services; which decides to submit a voluntary request to be designated as critical should provide the receiving European Supervisory Authority (ESAEuropean Supervisory Authority) with all the necessary information to demonstrate its criticality according to the principles and criteria set out in Regulation (EU) 2022/2554. For this reason, the information to be included in the voluntary request application should be sufficiently detailed and complete to enable a clear and complete assessment of criticality under Article 31(11) of that Regulation. The relevant ESAEuropean Supervisory Authority should reject any incomplete application and request the missing information.

We're continuously improving our platform to serve you better.

Your feedback matters! Let us know how we can improve.

Found a bug?

Springflod is a Swedish boutique consultancy firm specialising in cyber security within the financial services sector.

We offer professional services concerning information security governance, risk and compliance.

Crafted with ❤️ by Springflod