EIOPA · DORA211 - 3290
Other DORA topics
- Regulation
- (EU) 2022/2554 - Digital Operational Resilience Act (DORA)
- Article
- 28
- Topic
- Other DORA topics
- Submitted
- 2025-03-13
- Answered
- 2025-08-08
Question
The DORA refers in various places to the necessity of ICT services for the conduct of business operations (e.g., Article 28, Paragraph 1). From the DORA's perspective, are services that are not related to the financial institution's business operations not to be classified as ICT services because they are not related to the financial institution's resilience? For example, the provision of software for office furniture management or canteen management?
Background
One of DORAs main purpose is to improve the IT resilience of a financial instituition. So, any IKT services that do not affect or are not related to any of the core tasks or business goals of a financial institute should not be in scope of DORA.
Answer
This question has been rejected because it is seeking confirmation of a requirement already clearly set out in the regulation.
This Q&A is published by European Insurance and Occupational Pensions Authority and is non-binding. It does not constitute legal advice. Updated weekly from official ESA sources.
Similar Q&As
More Q&As on this topic
📋 Track EU financial regulation continuously
Forseti monitors EU financial regulation and delivers personalised alerts anchored to verified official sources.
14-day free trial. No credit card required.