(Text with EEA relevance)

Regulation (EU) 2022/2554 of the European Parliament and of the Council of 14 December 2022 on digital operational resilience for the financial sector and amending Regulations (EC) No 1060/2009, (EU) No 648/2012, (EU) No 600/2014, (EU) No 909/2014 and (EU) 2016/1011 (Text with EEA relevance) · European Union

CHAPTER I General provisions CHAPTER II ICT risk management Section I Section II CHAPTER III ICT-related incident management, classification and reporting CHAPTER IV Digital operational resilience testing CHAPTER V Managing of ICT third-party risk Section I Key principles for a sound management of ICT third-party risk Section II Oversight Framework of critical ICT third-party service providers CHAPTER VI Information-sharing arrangements CHAPTER VII Competent authorities CHAPTER VIII Delegated acts CHAPTER IX Transitional and final provisions Section I Section II Amendments This Regulation shall be binding in its entirety and directly applicable in all Member States. Done at Strasbourg, 14 December 2022. For the European Parliament The President R. METSOLA For the Council The President M. BEK

← on digital operational resilience for the financial sector and amending Regulations (EC) No 1060/2009, (EU) No 648/2012, (EU) No 600/2014, (EU) No 909/2014 and (EU) 2016/1011 · All articles · Preamble →

Source: EUR-Lex (Cellar) · retrieved 2026-10-12 · Text as adopted (Official Journal); later amendments are not incorporated in this text.