Question ID: DORA194 - 3208
Regulation Reference: (EU) 2022/2554 - Digital Operational Resilience Act (DORA)
Topic: ICT third-party risk management (DORA)
Article: 28
Status: Rejected
Date of submission: 13 Dec 2024
Question
Can the usage of code-sharing platforms (e.g. Bitbucket, Github) be considered an ICT-service under DORA?
Background of the question
Going by the DORA-criteria this seems likely. As with our similar question on social media usage, the terms and conditions of these platforms will probably not be adapted to satisfy DORA Article 30, which might block financial entities from using them in case they are meant to be designated ICT service providers. The impact of this seems difficult to estimate. A clarification on European level would be very welcome.
EIOPA answer
This question has been rejected because the answer can be found in Q&A DORA030.