ESMA_QA_2396

Status: ✅ Answer Published

Link to ESMA Q&A tool: https://www.esma.europa.eu/publications-data/questions-answers/2396

---

Regulatory Context

Regulation : DORA

Level 1 Regulation: Regulation (EU) 2022/2554 - The Digital Operational Resilience Act (DORA)

Level 2 Regulation: No information available

Level 3 Regulation: No information available

Topic: ICT risk management

Subject Matter: Definition on ICT services

---

Question

Submission Date: 10 January 2025

Article 3 (21) of DORA defines that ‘ICT services’ means digital and data services provided through ICT systems to one or more internal or external users on an ongoing basis.

It is not clear whether “digital and data services” should be interpreted as: Version one: either digital or data services (so two different of sets of activities or Version two: services which need to be both: digital service and parallel/in the same time data service.

---

ESMA Answer

Answer Date: 10-01-2025

Question is rejected because the matter it refers to has been answered in Q&A DORA030.

---

This document was automatically extracted from the ESMA EMIR Q&A database.