<!-- headlesslaw {"release":{"id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","published":"2026-11-01T16:41:30Z","pinned":false},"limits":{"coverage":{"history":"current_only","held_since":"2026-10-26","gaps":[],"covered":["2024/1502 — Delegated act — Critical ICT Providers [in force] L2"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","release_published":"2026-11-01T16:41:30Z","checked_at":"2026-10-26","checked_against":"EUR-Lex"},"truncation":null,"failures":[],"incomplete":[]},"page":{"path":"/dora/level-2/rts/2024-1502-critical-ict-third-party-providers/articles/5","url":"https://www.headlesslaw.com/dora/level-2/rts/2024-1502-critical-ict-third-party-providers/articles/5","title":"Article 5 — Degree of substitutability","family":"l2_unit_view","work_id":"spaces/dora/level-2/rts/2024-1502-critical-ict-third-party-providers","view_of":"/dora/level-2/rts/2024-1502-critical-ict-third-party-providers","status":"in_force","force_status":"in_force","date_state":"current","requested_date":null,"as_of":"2026-11-01","applies_from":null,"application":null,"version_label":"Commission Delegated Regulation (EU) 2024/1502, OJ L, 2024/1502, 30.5.2024","check":{"against":"EUR-Lex","on":"2026-10-26"},"check_result":"matched","official_url":"https://eur-lex.europa.eu/eli/reg_del/2024/1502/oj/eng","valid_from":"2024-06-19","valid_until":null,"content_id":"7701a4e0a2d13b38","versions":["2024-06-19"],"version_url":"https://www.headlesslaw.com/dora/level-2/rts/2024-1502-critical-ict-third-party-providers/articles/5/versions/2026-10-26","revision_url":"https://www.headlesslaw.com/dora/level-2/rts/2024-1502-critical-ict-third-party-providers/articles/5/versions/2026-10-26/rev/7701a4e0a2d13b38","versions_url":"https://www.headlesslaw.com/dora/level-2/rts/2024-1502-critical-ict-third-party-providers/articles/5/versions","relations_url":"https://www.headlesslaw.com/dora/level-2/rts/2024-1502-critical-ict-third-party-providers/articles/5/relations","act_url":"https://www.headlesslaw.com/dora/level-2/rts/2024-1502-critical-ict-third-party-providers#art-5","source_line":"Commission Delegated Regulation (EU) 2024/1502 · binding · OJ L, 2024/1502, 30.5.2024 · dated 22 Feb 2024 [in force]","attribution":{"prepared_by":"European Commission","published_by":"Publications Office of the EU","published_in":"Official Journal of the European Union","document_type":"delegated_regulation","legal_nature":"binding_adopted","addressees":"not stated in the document","dates":{"document_date":"2024-02-22","published_on":"2024-05-30","entry_into_force":"2024-06-19","locators":{"document_date":"CELLAR 32024R1502 work_date_document","published_on":"CELLAR 32024R1502 official-journal-act_date_publication","entry_into_force":"CELLAR 32024R1502 resource_legal_date_entry-into-force (earliest)"}},"adoption":null},"context":{"act":{"work_id":"spaces/dora/level-2/rts/2024-1502-critical-ict-third-party-providers","path":"/dora/level-2/rts/2024-1502-critical-ict-third-party-providers","name":"Commission Delegated Regulation (EU) 2024/1502","number":"2024/1502","celex":"32024R1502","title_official":"COMMISSION DELEGATED REGULATION (EU) 2024/1502 of 22 February 2024 supplementing Regulation (EU) 2022/2554 of the European Parliament and of the Council by specifying the criteria for the designation of ICT third-party service providers as critical for financial entities (Text with EEA relevance)","document_date":"2024-02-22"},"position":{"kind":"article","key":"5","index":5,"articles":7,"annexes":0},"prev":{"path":"/dora/level-2/rts/2024-1502-critical-ict-third-party-providers/articles/4","key":"4","title":"Article 4 — Criticality or importance of the functions"},"next":{"path":"/dora/level-2/rts/2024-1502-critical-ict-third-party-providers/articles/6","key":"6","title":"Article 6 — Information sources to enable criticality assessment"},"act_anchor":"#art-5"}}} -->
# Article 5 — Degree of substitutability

**Commission Delegated Regulation (EU) 2024/1502 · binding · OJ L, 2024/1502, 30.5.2024 · dated 22 Feb 2024 [in force]**

*In force · Commission Delegated Regulation (EU) 2024/1502, OJ L, 2024/1502, 30.5.2024 · Checked against EUR-Lex on 26 Oct 2026 · [Official source](https://eur-lex.europa.eu/eli/reg_del/2024/1502/oj/eng)*

1. <a id="art-5-p-1"></a>When considering the criterion set out in [Article 31(2)](../../articles/31.md), point (d), of Regulation (EU) 2022/2554, the ESAs shall assess whether the ICT third-party service provider fulfils the following ‘step 1’ sub-criteria:

    <a id="art-5-p-1-a"></a>**(a)** sub-criterion 4.1: the share of the total number of financial entities, broken down by categories of financial entities as set out in [Article 2(1)](../../articles/2.md) of Regulation (EU) 2022/2554, for which no alternative ICT third-party service provider is available which has the required capacity to provide the same ICT services that support critical or important functions of financial entities as the one provided by the relevant ICT third-party service provider;

    <a id="art-5-p-1-b"></a>**(b)** sub-criterion 4.2: the share of the total number of financial entities, broken down by categories of financial entities as set out in [Article 2(1)](../../articles/2.md) of Regulation (EU) 2022/2554, for which it is highly difficult to migrate an ICT service provided by the relevant ICT third-party service provider that supports critical or important functions of financial entities to another ICT third-party service provider.

1. <a id="art-5-p-2"></a>The sub-criterion 4.1 set out in paragraph 1, point (a), shall be calculated as follows:

    number of financial entities of a category of financial entities as set out in [Article 2(1)](../../articles/2.md) of Regulation (EU) 2022/2554, for which no alternative ICT third party service provider is available which has the required capacity to provide the same ICT services that support critical or important functions of financial entities as the one provided by the relevant ICT third party service provider

    total number of financial entities of that category of financial entities as set out in Article 2(1)of Regulation 2022/2554
1. <a id="art-5-p-3"></a>The sub-criterion set out in paragraph 1, point (b), shall be calculated as follows:

    number of financial entities of a category of financial entities as set out in [Article 2(1)](../../articles/2.md) of Regulation (EU) 2022/2554, for which it is highly difficult to migrate or reintegrate an ICT service provided by the ICT third party provider that support critical or important functions to another ICT third party provider

    total number of EU financial entities of that category of financial entities as set out in [Article 2(1)](../../articles/2.md) of Regulation (EU) 2022/2554
1. <a id="art-5-p-4"></a>An ICT third-party service provider shall be considered as having fulfilled both sub-criteria 4.1 and 4.2 where either of the following is met:

    <a id="art-5-p-4-a"></a>**(a)** the share of the total number of financial entities referred to in paragraph 1, point (a), is of at least 10 % of the total number of financial entities for a category of financial entities as set out in [Article 2(1)](../../articles/2.md) of Regulation (EU) 2022/2554;

    <a id="art-5-p-4-b"></a>**(b)** the share of the total number of financial entities referred to in paragraph 1, point (b), is of at least 10 % of the total number of financial entities or a category of financial entities as set out in [Article 2(1)](../../articles/2.md) of Regulation (EU) 2022/2554.

1. <a id="art-5-p-5"></a>When considering the criterion set out in [Article 31(2)](../../articles/31.md), point (d), of Regulation (EU) 2022/2554 and where the ICT third-party service provider fulfils the ‘step 1’ sub-criteria referred to in paragraph 1 of this Article, the ESAs shall carry out their assessment in the light of the step two sub-criterion specified in [Article 31(2)](../../articles/31.md), point (d)(i) of Regulation (EU) 2022/2554.
