supplementing Regulation (EU) 2022/2554 of the European Parliament and of the Council with regard to regulatory technical standards specifying the elements that a financial entity has to determine and assess when subcontracting ICT services supporting critical or important functions

This regulation sets detailed technical standards for financial firms. It specifies how they must assess and manage risks when outsourcing critical digital services to ensure the stability of the financial system.

It affects banks, investment firms, and other financial entities. The rules aim to enhance cybersecurity and operational resilience across the EU's financial sector.