DORA, Artikkel 30, SE

1. The rights and obligations of the financial entity and of the ICT third-party service provider shall be clearly allocated and set out in writing. The full contract shall include the service level agreements and be documented in one written document which shall be available to the parties on paper, or in a document with another downloadable, durable and accessible format.

2. The contractual arrangements on the use of ICT services shall include at least the following elements:

(a)

a clear and complete description of all functions and ICT services to be provided by the ICT third-party service provider, indicating whether subcontracting of an ICT service supporting a critical or important function, or material parts thereof, is permitted and, when that is the case, the conditions applying to such subcontracting;

(b)

the locations, namely the regions or countries, where the contracted or subcontracted functions and ICT services are to be provided and where data is to be processed, including the storage location, and the requirement for the ICT third-party service provider to notify the financial entity in advance if it envisages changing such locations;

(c)

provisions on availability, authenticity, integrity and confidentiality in relation to the protection of data, including personal data;

(d)

provisions on ensuring access, recovery and return in an easily accessible format of personal and non-personal data processed by the financial entity in the event of the insolvency, resolution or discontinuation of the business operations of the ICT third-party service provider, or in the event of the termination of the contractual arrangements;

(e)

service level descriptions, including updates and revisions thereof;

(f)

the obligation of the ICT third-party service provider to provide assistance to the financial entity at no additional cost, or at a cost that is determined ex-ante, when an ICT incident that is related to the ICT service provided to the financial entity occurs;

Offisiell kilde

Versjon: bb364331b3128df9

SHA-256: sha256:bb364331b3128df9d4cca27f8833719cb4fa7e6e9d1e0c7d28f7c421be0a04a6

• Artikkel 1
• Artikkel 2
• Artikkel 3
• Artikkel 4
• Artikkel 5
• Artikkel 6
• Artikkel 7
• Artikkel 8
• Artikkel 9
• Artikkel 10
• Artikkel 11
• Artikkel 12
• Artikkel 13
• Artikkel 14
• Artikkel 15
• Artikkel 16
• Artikkel 17
• Artikkel 18
• Artikkel 19
• Artikkel 20
• Artikkel 21
• Artikkel 22
• Artikkel 23
• Artikkel 24
• Artikkel 25
• Artikkel 26
• Artikkel 27
• Artikkel 28
• Artikkel 29
• Artikkel 31
• Artikkel 32
• Artikkel 33
• Artikkel 34
• Artikkel 35
• Artikkel 36
• Artikkel 37
• Artikkel 38
• Artikkel 39
• Artikkel 40
• Artikkel 41
• Artikkel 42
• Artikkel 43
• Artikkel 44
• Artikkel 45
• Artikkel 46
• Artikkel 47
• Artikkel 48
• Artikkel 49
• Artikkel 50
• Artikkel 51
• Artikkel 52
• Artikkel 53
• Artikkel 54
• Artikkel 55
• Artikkel 56
• Artikkel 57
• Artikkel 58
• Artikkel 59
• Artikkel 60
• Artikkel 61
• Artikkel 62
• Artikkel 63
• Artikkel 64

Geografiske artikkelagenter

Source: NovaCopilot