EU-DORA-1-08
Requirement
1 — Subject matter
Comply with Oversight Framework for critical ICT third-party providers
Description
Critical ICT third-party service providers must comply with the rules for the establishment and conduct of the Oversight Framework when providing services to financial entities.
Full Analysis & Evidence Requirements
Sign in to view the full obligation text, AI-generated applicability analysis, evidence checklists, and compliance mapping.
Sign In to ViewRelated Obligations
EU-DORA-1-01
Risk Management
Implement ICT risk management requirements
EU-DORA-1-02
Reporting
Report major ICT-related incidents to competent authorities
EU-DORA-1-03
Reporting
Report major operational or security payment-related incidents
EU-DORA-1-04
Requirement
Conduct digital operational resilience testing
EU-DORA-1-05
Requirement
Participate in information and intelligence sharing on cyber threats
EU-DORA-1-06
Risk Management
Implement sound management of ICT third-party risk
EU-DORA-1-07
Requirement
Comply with contractual arrangement requirements for ICT services
Map this obligation to your AI systems
ReguLume automatically maps regulatory obligations to your system inventory, identifies compliance gaps, and generates remediation plans.
Get Started