ICT concentration risk

Regulation (EU) 2022/2554

Definition

(29) 'ICT concentration risk' means an exposure to individual or multiple related critical ICT third-party service providers creating a degree of dependency on such providers so that the unavailability, failure or other type of shortfall of such provider may potentially endanger the ability of a financial entity to deliver critical or important functions, or cause it to suffer other types of adverse effects, including large losses, or endanger the financial stability of the Union as a whole;

Source

DORA, Article 3, point (29).

Used in DORA

• Article 28
• Article 29
• Article 32
• Article 35