[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:dora\u002F30":3},{"item":4,"lessons":16,"controls":18,"related":19},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"dora","30","Article 30","Key contractual provisions",0,"Regulation (EU) 2022\u002F2554 (Digital Operational Resilience Act)","**What it asks for.** Contracts for ICT services must be in writing and contain minimum provisions, including a description of the services, whether subcontracting of critical or important functions is allowed and on what conditions, the locations where services are provided and data processed, data protection and security provisions, access to and return of data on insolvency or termination, service levels, incident assistance, cooperation with competent authorities, termination rights and participation in security awareness and resilience training.\n\n**In practice.** For services supporting critical or important functions, contracts must additionally contain full service level descriptions with precise quantitative and qualitative performance targets, notice and reporting obligations, requirements to implement and test business contingency plans and appropriate security measures, participation in threat-led penetration testing, unrestricted rights of access, inspection and audit, and exit strategies with a mandatory adequate transition period. Doing this well means a contract clause checklist, gap remediation for legacy contracts and use of standard clauses. Evidence includes reviewed contracts mapped to each requirement.\n\n**Common gaps.** Gaps include legacy and cloud standard terms that lack audit rights or exit transition periods, and contracts that do not reflect subcontracting chains.",null,"https:\u002F\u002Feur-lex.europa.eu\u002Flegal-content\u002FEN\u002FTXT\u002FHTML\u002F?uri=CELEX:32022R2554#art_30","Read the official text on EUR-Lex","2026-10-18T15:18:43.664+00:00",{"total":9,"list":17},[],[],[]]