ICT supply chain

• A register of information on all your ICT providers is kept up to date.
• DORA contractual clauses are included in your provider contracts.
• You have identified providers that could be designated as “critical”.
• You have assessed concentration risks on any single provider.
• Exit plans are defined for your critical providers.

← Previous phase: Incident management