2024-12-02
Added · Updated
Financial entities must use standardized templates to maintain and update their register of information regarding ICT third-party service providers, covering entity, sub-consolidated, and consolidated levels. The regulation mandates that entities assign a numerical rank to each provider in the supply chain, with direct providers ranked as '1' and subcontractors ranked higher. Entities are required to include specific data on contractual arrangements, service chains, critical functions, and risk assessments using predefined formats and identifiers such as LEI or EUID. These implementing technical standards enter into force on the twentieth day following publication in the Official Journal of the European Union.
Get EC alerts — same-day email on every new publication.
Skip to main content
EUR-Lex
Access to European Union law
This document is an excerpt from the EUR-Lex website
You are here
EUROPA
EUR-Lex home
EUR-Lex - 02024R2956-20241202 - EN
Help
Quick search
Use quotation marks to search for an "exact phrase". Append an asterisk ( * ) to a search term to find variations of it (transp * , 32019R * ). Use a question mark ( ? ) instead of a single character in your search term to find variations of it (ca ? e finds case, cane, care).
Search tips
Need more search options? Use the
Read the rest free, and get an email when EC publishes again
Source: European Commission — original document · Summary generated with machine assistance and reviewed before publication; the authoritative text is the regulator's original document. How RegAlert works
More like this from EC
We email you every new EC publication the day it's published.