EU designates critical ICT third-party providers under DORA

European supervisors carried out a systematic assessment of the importance of each service provider to the financial sector, before deciding on designation.

The European Supervisory Authorities (ESAs) have published a list of companies whose services have been deemed “critical” for the stability and operational resilience of the bloc’s financial sector, designating them as “critical third-party providers” or CTPPs. Most of these firms provide services in the information and communication technology (ICT) sector.

Free Trial

Register for free to keep reading.

To continue reading this article and unlock full access to GRIP, register now. You’ll enjoy free access to all content until our subscription service launches in early 2026.

  • Unlimited access to industry insights
  • Stay on top of key rules and regulatory changes with our Rules Navigator
  • Ad-free experience with no distractions
  • Regular podcasts from trusted external experts
  • Fresh compliance and regulatory content every day
Register for free Already a member? Sign in