ICT providers
Learn how to meet specific standards for security, business continuity and operational risk management in the ICT services area in accordance with DORA.
Both the financial sector entity and the ICT provider to the sector must monitor and assess ICT risks to ensure compliance with the requirements of the DORA regulation and maintain operational stability.
-
DORA requires a new approach to ICT risk and compliance. See how GRC tools supports documentation, risk analysis, and oversight of providers.
-
The register of information should be maintained and updated, as it may be subject to inspection by the authorities at any time.
-
The ICT provider survey verifies whether the contract is for critical or essential services. It is used to assess the ICT provider against the DORA regulation.
-
ICT providers management is a multi-component process: learn about classification guidelines, DORA responsibilities, reporting.
-
To classify ICT providers, that is, to consistently apply the criteria indicated in DORA and RTS. The first step is the results of the BIA analysis.