RTS Subcontracting ICT services
This is the regulatory technical standard (RTS) on subcontracting ICT services as adopted by the European Commission according to DORA Article 30(5), using the final draft available from the European Banking Authority (EBA) as source. The RTS was published in July 2024 and is expected to become applicable on 17 January 2025 alongside DORA.
This text is provided as-is and should not be relied upon as an authoritative source. Instead, consult the Official Journal for the authoritative version once published.
We are not aware of any material differences between the draft and authoritative versions but will ensure to update these pages to reflect the authoritative version as soon as possible.
Our commitment is to continuously enhance this platform, improving readability and navigation for your convenience. Stay updated on our progress by following us on LinkedIn, where we announce new features. If you have any questions or suggestions, please feel free to reach out to us at dora@springflod.se.
Enjoy.
Table of Contents
Preamble
1 – 19
Recitals
Article 1
Overall risk profile and complexity
Article 2
Group application
Article 3
Due diligence and risk assessment regarding the use of subcontractors supporting critical or important functions
Article 4
Description and conditions under which ICT services supporting a critical or important function may be subcontracted
Article 5
Conditions for subcontracting relating to the chain of ICT subcontractors providing a service supporting a critical or important function by the financial entity
Article 6
Material changes to subcontracting arrangements of ICT service supporting critical or important functions
Article 7
Termination of the contractual arrangement
Article 8
Entry into force