Preliminary assessment of ICT concentration risk
Summary
Financial entities shall assess the potential impact of ICT concentration risk on the continuous delivery of critical or important functions.
concentration risksubstitutabilityexit strategydiversification
Read the full official text: https://eur-lex.europa.eu/eli/reg/2022/2554/oj
← Article 29
Key ICT third-party service providers
Article 34 →
Classification of major ICT-related incidents and significant cyber threats
Track DORA article 30 as evidence
eurocompliant maps this obligation to a checklist task and the evidence that satisfies it, alongside every other framework you follow.
Start free trial