Glossary
Third-party ICT provider
Any external provider (cloud, hosting, SaaS...) that a financial entity relies on for its ICT functions.
A third-party ICT provider is any external organisation that supplies digital services to a financial entity: hosting provider, cloud provider (IaaS/PaaS/SaaS), software vendor, data centre, cybersecurity provider...
DORA governs the contractual relationship with these providers (minimum clauses, audit rights, exit plans) and subjects the most important of them — designated "critical" — to direct oversight by the European authorities.