Skip to main content
Logo
European Insurance and Occupational Pensions Authority
 

DORA112 - 3138

Q&A

Question ID: DORA112 - 3138

Regulation Reference: (EU) 2022/2554 - Digital Operational Resilience Act (DORA)

Topic: ICT third-party risk management (DORA)

Status: Rejected

Date of submission: 06 Aug 2024

Question

Regarding the "Identification code of the ICT third-party service provider’s ultimate parent undertaking" and the "Type of code to identify the ICT third-party service provider’s ultimate parent undertaking". I am having doubts regarding the concept of ultimate parent undertaking. My question is if, for the purpose of DORA, we should consider the concept foreseen in Article 48a of Directive 2013/34/EU: "(1) “ultimate parent undertaking” means an undertaking which draws up the consolidated financial statements of the largest body of undertakings;". Or, if we should consider simply highest parent of a company? 

Background of the question

Concept of “ultimate parent undertaking”.

EIOPA answer

The question has been rejected because it is seeking confirmation of a requirement already clearly set out in the regulation.