A key difference between the requirements DORA imposes on contracts and the position set out in the EBA Outsourcing Guidelines and the PRA Requirements is that DORA applies to contracts for all “ICT services”, not only to outsourcings. ICT services is defined very broadly in DORA, as:
“digital and data services provided through ICT systems to one or more internal or external users on an ongoing basis, including hardware as a service and hardware services which includes the provision of technical support via software or firmware updates by the hardware provider, excluding traditional analogue telephone services.”
Interested in reading more about getting your contracts ready for DORA, please download Deloitte’s full article here.
