ESMA_QA_2396
10/01/2025
Subject Matter
Definition on ICT services
    Article 3 (21) of DORA defines that 'ICT services’ means digital and data services provided through ICT systems to one or more internal or external users on an ongoing basis.

    It is not clear whether "digital and data services" should be interpreted as:
    Version one: either digital or data services (so two different of sets of activities or
    Version two: services which need to be both: digital service and parallel/in the same time data service.
    Status: Question Rejected

    Additional Information

    Level 1 Regulation
    Regulation (EU) 2022/2554 - The Digital Operational Resilience Act (DORA)
    Additional Legal Reference
    Article 3 (21)
    Topic
    ICT risk management