ESMA_QA_2057

Status: ✅ Answer Published

Link to ESMA Q&A tool: https://www.esma.europa.eu/publications-data/questions-answers/2057

---

Regulatory Context

Regulation : DORA

Level 1 Regulation: Regulation (EU) 2022/2554 - The Digital Operational Resilience Act (DORA)

Level 2 Regulation: No information available

Level 3 Regulation: No information available

Topic: ICT third-party risk management

Subject Matter: Software companies

---

Question

Submission Date: 20 December 2023

How can DORA Article 28 be applied on software companies when the financial entity purchases off-the-shelf software licenses? If the off-the-shelf software supports critical or important function, should the DORA Article 28 (8) be applied?

---

ESMA Answer

Answer Date: 19-03-2024

No answer has been published yet for this question.

---

This document was automatically extracted from the ESMA EMIR Q&A database.