Delegated regulation specifying the criticality criteria for critical ICT 3rd party service providers (CTTPS)

Commission Delegated Regulation (EU) 2024/1502 of 22 February 2024 supplementing Regulation (EU) 2022/2554 of the European Parliament and of the Council by specifying the criteria for the designation of ICT third-party service providers as critical for financial entities

The Delegated Regulation specifies criteria for designating ICT third-party service providers as critical for financial entities, supplementing DORA. It introduces a two-step assessment process by the European Supervisory Authorities, focusing on both quantitative and qualitative sub-criteria to evaluate the criticality and systemic impact of these providers on the financial sector.