On 16 November 2023, the European Commission released the Draft Regulatory Technical Standards outlining specifying certain criteria and fees relating to critical ICT third-party service providers, as mandated by Article 31(6) of Regulation (EU) 2022/2554 (DORA) and opened a consultation which remains open until 14 December 2023. The Draft outlines the assessment approach and criteria for determining criticality, including systemic impact, importance to global systemically important institutions and critical functions. The Draft details the formulas, thresholds, and information sources for each criterion.
Original source