EBA Q&A 2025_7412 — Q&A — Register of ICT Services [Rejected question]

Register of ICT Services

Question

Are these listed listed types of ICT-services (e.g., S07, S11, S12) covered under DORA’s definition of ICT Services? If not, can, e.g., facilities or infrastructure that do not include data or digital elements be excluded from this definition?

Background

Financial entities must maintain a Register of ICT Services and assign an identifier (S01 - S19) from Annex 3 of the ITS. Examples include:

S07. ICT, facilities, and hosting services (excluding cloud services) – Covers ICT infrastructure, facilities, hosting, utilities (energy, heat management, etc.), telecom access, and physical security.

S11. Network infrastructure – Covers the provision of network infrastructure.

S12. Hardware and physical devices – Includes workstations, phones, servers, data storage devices, and appliances provided as a service.

---

Answer

This question has been rejected because the issue it raises is out of scope of the Q&A process.

The Single Rule Book Q&A tool has been established to provide explanations and non-binding interpretations on questions relating to the practical application or implementation of the provisions of legislative acts referred to in Article 1(2) of the EBA’s founding Regulation, as well as associated delegated and implementing acts, and guidelines and recommendations, adopted under these legislative acts.

For further information on the purpose of this tool and on how to submit questions, please see “Additional background and guidance for asking questions”.

---

Source: EBA original document