<!-- headlesslaw {"release":{"id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","published":"2026-11-01T16:41:30Z","pinned":false},"limits":{"coverage":{"history":"current_only","held_since":"2026-10-26","gaps":[],"covered":["2024/1502 — Delegated act — Critical ICT Providers [in force] L2"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","release_published":"2026-11-01T16:41:30Z","checked_at":"2026-10-26","checked_against":"EUR-Lex"},"truncation":null,"failures":[],"incomplete":[]},"page":{"path":"/dora/level-2/rts/2024-1502-critical-ict-third-party-providers/articles/6","url":"https://www.headlesslaw.com/dora/level-2/rts/2024-1502-critical-ict-third-party-providers/articles/6","title":"Article 6 — Information sources to enable criticality assessment","family":"l2_unit_view","work_id":"spaces/dora/level-2/rts/2024-1502-critical-ict-third-party-providers","view_of":"/dora/level-2/rts/2024-1502-critical-ict-third-party-providers","status":"in_force","force_status":"in_force","date_state":"current","requested_date":null,"as_of":"2026-11-01","applies_from":null,"application":null,"version_label":"Commission Delegated Regulation (EU) 2024/1502, OJ L, 2024/1502, 30.5.2024","check":{"against":"EUR-Lex","on":"2026-10-26"},"check_result":"matched","official_url":"https://eur-lex.europa.eu/eli/reg_del/2024/1502/oj/eng","valid_from":"2024-06-19","valid_until":null,"content_id":"da57d3e0f1088c60","versions":["2024-06-19"],"version_url":"https://www.headlesslaw.com/dora/level-2/rts/2024-1502-critical-ict-third-party-providers/articles/6/versions/2026-10-26","revision_url":"https://www.headlesslaw.com/dora/level-2/rts/2024-1502-critical-ict-third-party-providers/articles/6/versions/2026-10-26/rev/da57d3e0f1088c60","versions_url":"https://www.headlesslaw.com/dora/level-2/rts/2024-1502-critical-ict-third-party-providers/articles/6/versions","relations_url":"https://www.headlesslaw.com/dora/level-2/rts/2024-1502-critical-ict-third-party-providers/articles/6/relations","act_url":"https://www.headlesslaw.com/dora/level-2/rts/2024-1502-critical-ict-third-party-providers#art-6","source_line":"Commission Delegated Regulation (EU) 2024/1502 · binding · OJ L, 2024/1502, 30.5.2024 · dated 22 Feb 2024 [in force]","attribution":{"prepared_by":"European Commission","published_by":"Publications Office of the EU","published_in":"Official Journal of the European Union","document_type":"delegated_regulation","legal_nature":"binding_adopted","addressees":"not stated in the document","dates":{"document_date":"2024-02-22","published_on":"2024-05-30","entry_into_force":"2024-06-19","locators":{"document_date":"CELLAR 32024R1502 work_date_document","published_on":"CELLAR 32024R1502 official-journal-act_date_publication","entry_into_force":"CELLAR 32024R1502 resource_legal_date_entry-into-force (earliest)"}},"adoption":null},"context":{"act":{"work_id":"spaces/dora/level-2/rts/2024-1502-critical-ict-third-party-providers","path":"/dora/level-2/rts/2024-1502-critical-ict-third-party-providers","name":"Commission Delegated Regulation (EU) 2024/1502","number":"2024/1502","celex":"32024R1502","title_official":"COMMISSION DELEGATED REGULATION (EU) 2024/1502 of 22 February 2024 supplementing Regulation (EU) 2022/2554 of the European Parliament and of the Council by specifying the criteria for the designation of ICT third-party service providers as critical for financial entities (Text with EEA relevance)","document_date":"2024-02-22"},"position":{"kind":"article","key":"6","index":6,"articles":7,"annexes":0},"prev":{"path":"/dora/level-2/rts/2024-1502-critical-ict-third-party-providers/articles/5","key":"5","title":"Article 5 — Degree of substitutability"},"next":{"path":"/dora/level-2/rts/2024-1502-critical-ict-third-party-providers/articles/7","key":"7","title":"Article 7 — Entry into force and application"},"act_anchor":"#art-6"}}} -->
# Article 6 — Information sources to enable criticality assessment

**Commission Delegated Regulation (EU) 2024/1502 · binding · OJ L, 2024/1502, 30.5.2024 · dated 22 Feb 2024 [in force]**

*In force · Commission Delegated Regulation (EU) 2024/1502, OJ L, 2024/1502, 30.5.2024 · Checked against EUR-Lex on 26 Oct 2026 · [Official source](https://eur-lex.europa.eu/eli/reg_del/2024/1502/oj/eng)*

1. <a id="art-6-p-1"></a>The ESAs shall use the data provided by the registers of information referred to in [Article 28(3)](../../articles/28.md) of Regulation (EU) 2022/2554, for the assessment of the sub-criteria listed in Articles 2 to 5. The ESAs may also use additional available data they have at their disposal from all sources of information to perform the criticality assessment.
1. <a id="art-6-p-2"></a>The ESAs shall take into account the most recent data available to them during the assessment year, or where applicable, the data that has been made available to them at the latest by 31 December of the year preceding the criticality assessment.