Delegated Regulation on the policy on the use of ICT services

Commission Delegated Regulation (EU) 2024/1773 of 13 March 2024 supplementing Regulation (EU) 2022/2554 of the European Parliament and of the Council with regard to regulatory technical standards specifying the detailed content of the policy regarding contractual arrangements on the use of ICT services supporting critical or important functions provided by ICT third-party service providers

The Delegated Regulation specifies the requirements for and the contents of the policy on the use of ICT services supporting critical or important functions provided. The policy is a mandatory part of the ICT third-party risk strategy which some financial entities must adopt under Article 28(4) of DORA.