DORA's ICT third-party risk requirements and the cloud concentration problem
The Digital Operational Resilience Act requires financial entities to manage the risks arising from their reliance on ICT third-party providers, and establishes an oversight framework for those providers designated as critical. This note asks a narrower question: whether DORA's …
Read more