<!-- headlesslaw {"release":{"id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","published":"2026-11-01T16:41:30Z","pinned":false},"limits":{"coverage":{"history":"current_only","held_since":"2026-10-26","gaps":[],"covered":["2024/1502 — Delegated act — Critical ICT Providers [in force] L2"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","release_published":"2026-11-01T16:41:30Z","checked_at":"2026-10-26","checked_against":"EUR-Lex"},"truncation":null,"failures":[],"incomplete":[]},"page":{"path":"/dora/level-2/rts/2024-1502-critical-ict-third-party-providers/articles/3","url":"https://www.headlesslaw.com/dora/level-2/rts/2024-1502-critical-ict-third-party-providers/articles/3","title":"Article 3 — Systemic character and importance of the ICT services provided to financial entities","family":"l2_unit_view","work_id":"spaces/dora/level-2/rts/2024-1502-critical-ict-third-party-providers","view_of":"/dora/level-2/rts/2024-1502-critical-ict-third-party-providers","status":"in_force","force_status":"in_force","date_state":"current","requested_date":null,"as_of":"2026-11-01","applies_from":null,"application":null,"version_label":"Commission Delegated Regulation (EU) 2024/1502, OJ L, 2024/1502, 30.5.2024","check":{"against":"EUR-Lex","on":"2026-10-26"},"check_result":"matched","official_url":"https://eur-lex.europa.eu/eli/reg_del/2024/1502/oj/eng","valid_from":"2024-06-19","valid_until":null,"content_id":"eadc30c83f132cf6","versions":["2024-06-19"],"version_url":"https://www.headlesslaw.com/dora/level-2/rts/2024-1502-critical-ict-third-party-providers/articles/3/versions/2026-10-26","revision_url":"https://www.headlesslaw.com/dora/level-2/rts/2024-1502-critical-ict-third-party-providers/articles/3/versions/2026-10-26/rev/eadc30c83f132cf6","versions_url":"https://www.headlesslaw.com/dora/level-2/rts/2024-1502-critical-ict-third-party-providers/articles/3/versions","relations_url":"https://www.headlesslaw.com/dora/level-2/rts/2024-1502-critical-ict-third-party-providers/articles/3/relations","act_url":"https://www.headlesslaw.com/dora/level-2/rts/2024-1502-critical-ict-third-party-providers#art-3","source_line":"Commission Delegated Regulation (EU) 2024/1502 · binding · OJ L, 2024/1502, 30.5.2024 · dated 22 Feb 2024 [in force]","attribution":{"prepared_by":"European Commission","published_by":"Publications Office of the EU","published_in":"Official Journal of the European Union","document_type":"delegated_regulation","legal_nature":"binding_adopted","addressees":"not stated in the document","dates":{"document_date":"2024-02-22","published_on":"2024-05-30","entry_into_force":"2024-06-19","locators":{"document_date":"CELLAR 32024R1502 work_date_document","published_on":"CELLAR 32024R1502 official-journal-act_date_publication","entry_into_force":"CELLAR 32024R1502 resource_legal_date_entry-into-force (earliest)"}},"adoption":null},"context":{"act":{"work_id":"spaces/dora/level-2/rts/2024-1502-critical-ict-third-party-providers","path":"/dora/level-2/rts/2024-1502-critical-ict-third-party-providers","name":"Commission Delegated Regulation (EU) 2024/1502","number":"2024/1502","celex":"32024R1502","title_official":"COMMISSION DELEGATED REGULATION (EU) 2024/1502 of 22 February 2024 supplementing Regulation (EU) 2022/2554 of the European Parliament and of the Council by specifying the criteria for the designation of ICT third-party service providers as critical for financial entities (Text with EEA relevance)","document_date":"2024-02-22"},"position":{"kind":"article","key":"3","index":3,"articles":7,"annexes":0},"prev":{"path":"/dora/level-2/rts/2024-1502-critical-ict-third-party-providers/articles/2","key":"2","title":"Article 2 — Systemic impact of ICT third-party service providers on the stability, continuity or quality of the provision of financial services"},"next":{"path":"/dora/level-2/rts/2024-1502-critical-ict-third-party-providers/articles/4","key":"4","title":"Article 4 — Criticality or importance of the functions"},"act_anchor":"#art-3"}}} -->
# Article 3 — Systemic character and importance of the ICT services provided to financial entities

**Commission Delegated Regulation (EU) 2024/1502 · binding · OJ L, 2024/1502, 30.5.2024 · dated 22 Feb 2024 [in force]**

*In force · Commission Delegated Regulation (EU) 2024/1502, OJ L, 2024/1502, 30.5.2024 · Checked against EUR-Lex on 26 Oct 2026 · [Official source](https://eur-lex.europa.eu/eli/reg_del/2024/1502/oj/eng)*

**1.** When considering the criterion set out in [Article 31(2)](../../articles/31.md), point (b), of Regulation (EU) 2022/2554, the ESAs shall assess whether the ICT third-party service provider fulfils the following ‘step 1’ sub-criteria:
> **(a)** sub-criterion 2.1: number of global systemically important institutions (G-SIIs) and other systemically important institutions (O-SIIs) that are credit institutions to which ICT services are provided by the same ICT third-party service provider where the ICT services support critical or important functions;
> **(b)** sub-criterion 2.2: number of financial entities, other than credit institutions and G-SIIs and O-SIIs referred to in point (a) above, identified as systemic by competent authorities referred to under [Article 46](../../articles/46.md) of Regulation (EU) 2022/2554 to which ICT services are provided by the same ICT third-party service provider where the ICT services support critical or important functions.
**2.** An ICT third-party service provider shall be considered as having fulfilled the sub-criterion set out in paragraph 1, point (a), if the ICT services it provides are used at least by either of the following:
> **(a)** one G-SII;
> **(b)** at least three O-SIIs;
> **(c)** at least one O-SII with an O-SII score above 3 000 calculated in accordance with Article 131(3) of Directive 2013/36/EU of the European Parliament and of the Council.
**3.** An ICT third-party service provider shall be considered as having fulfilled the sub-criterion set out in paragraph 1, point (b), if the ICT services that it provides are used at least by either of the following:
> **(a)** one financial entity that is a financial entity as referred to in [Article 2(1)](../../articles/2.md), points (g), (h), (i) or (j) of Regulation (EU) 2022/2554 and which is identified as ‘systemic’ by competent authorities;
> **(b)** at least three financial entities, other than credit institutions and than financial entities referred to in [Article 2(1)](../../articles/2.md), points (g), (h), (i) or (j) of Regulation (EU) 2022/2554 and which are identified as ‘systemic’ by competent authorities.
**4.** When considering the criterion set out in [Article 31(2)](../../articles/31.md), point (b), of Regulation (EU) 2022/2554 and where the ICT third-party service provider fulfils the ‘step 1’ sub-criteria referred to in paragraph 1 of this Article, the ESAs shall carry out their assessment in the light of the following ‘step 2’ sub-criterion:
> — sub-criterion 2.3: G-SIIs or O-SIIs and other financial entities included in the assessment in the ‘step 1’ sub criteria referred to in paragraph 1 of this Article, including where those G-SIIs or O-SIIs provide financial infrastructure services to other financial entities, relying on an ICT service provided by the same ICT third-party service provider, are interdependent.
