Commission Implementing Regulation (EU) 2024/2956

In force

This text since 2 Dec 2024law://eu/reg/2024/2956/anx_I__grp_2__grp_12__blk_4@2026-11-13

Contents

Each ICT third-party service provider that belongs to the same ICT service supply chain is assigned with a ‘rank’ (template B_05.02.0050) to identify its position within the ICT service supply chain. Where multiple ICT third-party service providers have the same position within the same ICT service supply chain, those providers shall be assigned with the same ‘rank’. In accordance with Article 2, the direct ICT third-party service providers are therefore at rank 1. If the rank is higher than 1, the ICT third-party service providers are subcontractors.

Source: EUR-Lex, © European Union, 1998-2026. Reuse authorised under Decision 2011/833/EU.

Key facts

Type: Implementing regulation · Commission Implementing Regulation (EU) 2024/2956
Adopted: 29 Nov 2024
Text current to: 2 Dec 2024
In force: 22 Dec 2024
Made by: Directorate-General for Financial Stability, Financial Services and Capital Markets Union, European Commission
Official: EUR-Lex 32024R2956 · ELI

Topics

cloud computing digital single market digitisation financial services financial technology information security information technology outsourcing risk management technical standard Internal market - Principles Security system

History · 1 version

2 Dec 2024Reading

Connections

See on a map

Cites 1: this act

Defined terms · 2

Show every defined term

direct ICT third-party service provider
means an ICT third-party service provider or ICT intra-group service provider that signed a contractual arrangement with:
rank
means the position of an ICT third-party service provider in the ICT service supply chain.