CIR 2024-2956 Article 2

Article 2 – Ranking of ICT third-party providers in the supply chain

Financial entities shall assign a rank to each ICT third-party service provider. The rank shall be any natural number higher or equal to ‘1’ where the lower the natural number assigned to the rank, the closer the arrangement is to the financial entity.

The rank of the direct ICT third-party service provider in the ICT service supply chain shall always be ‘1’.

The rank of the subcontractor in the ICT service supply chain shall always be higher than ‘1’.