Question ID: DORA112 - 3138
Regulation Reference: (EU) 2022/2554 - Digital Operational Resilience Act (DORA)
Topic: ICT third-party risk management (DORA)
Status: Rejected
Date of submission: 06 Aug 2024
Question
Regarding the "Identification code of the ICT third-party service provider’s ultimate parent undertaking" and the "Type of code to identify the ICT third-party service provider’s ultimate parent undertaking". I am having doubts regarding the concept of ultimate parent undertaking. My question is if, for the purpose of DORA, we should consider the concept foreseen in Article 48a of Directive 2013/34/EU: "(1) “ultimate parent undertaking” means an undertaking which draws up the consolidated financial statements of the largest body of undertakings;". Or, if we should consider simply highest parent of a company?
Background of the question
Concept of “ultimate parent undertaking”.
EIOPA answer
The question has been rejected because it is seeking confirmation of a requirement already clearly set out in the regulation.