Commission Delegated Regulation (EU) 2024/1773 on ICT third-party risk policy standards

The European Commission adopted Delegated Regulation (EU) 2024/1773 to supplement Regulation (EU) 2022/2554 by establishing regulatory technical standards for financial entities' policies on ICT third-party risk. The regulation mandates that financial entities define detailed content for policies governing contractual arrangements with ICT third-party service providers supporting critical or important functions. It requires specific governance arrangements, including annual management body reviews, ex-ante risk assessments, and due diligence processes for selecting providers. The standards also prescribe requirements for contractual clauses, conflict of interest management, and exit strategies to ensure digital operational resilience.

Get EC alerts — same-day email on every new publication.

EUR-Lex

Access to European Union law

This document is an excerpt from the EUR-Lex website

You are here

EUROPA

EUR-Lex home

Delegated regulation - EU - 2024/1773 - EN - EUR-Lex

Help

Quick search

Use quotation marks to search for an "exact phrase". Append an asterisk ( * ) to a search term to find variations of it (transp * , 32019R * ). Use a question mark ( ? ) instead of a single character in your search term to find variations of it (ca ? e finds case, cane, care).

Read the rest free, and get an email when EC publishes again

Email me when EC publishes something newOne email per publication, same day. Sign in below to keep reading.

Lineage: In force

amendssupersedesissued underrefers toproposed or not in RegAlertarrows run from the older text to the one that changes it

Source: European Commission — original document · Summary generated with machine assistance and reviewed before publication; the authoritative text is the regulator's original document. How RegAlert works