Regulation on the use of ICT services supporting critical or important functions provided by ICT third-party service providers

This procedure sets out detailed technical rules for financial institutions' contracts with external providers of IT services. It ensures these services, which are crucial for operations, meet EU standards for safety and soundness, aligning with broader digital operational resilience goals.

These rules will affect financial institutions like banks and investment firms, as well as their IT service providers. They aim to enhance the security and reliability of critical IT functions, ultimately protecting consumers and market stability.