For the purposes of this Regulation, the following definitions apply:
‘direct ICT third-party service provider’ means an ICT third-party service provider or ICT intra-group service provider that signed a contractual arrangement with:
a financial entity to provide its ICT services directly to that financial entity;
a financial or a non-financial entity to provide its services to other financial entities within the same group;
‘ICT service supply chain’ means a sequence of contractual arrangements connected with the ICT service being provided by the direct ICT third-party service provider to the financial entity, starting with the direct ICT third-party service provider which has one or multiple other ICT third-party service providers as counterparties (subcontractors);
‘rank’ means the position of an ICT third-party service provider in the ICT service supply chain.