[non-validated] DORA SFS D / SF 7: ICT Third-Party Risk Register Submission
Generated catalog draft. No operational assessment or human approval is claimed.
[non-validated] This question has unresolved selected work.
Question
[non-validated] Has the designated financial entity submitted its completed ICT third-party risk register to the competent authority as required by DORA Articles 28 and 29?
Explanation
[non-validated] Must designated financial entities submit their completed ICT third-party risk register to the competent authority as required by DORA Articles 28 and 29?
Criterion and evidence
Applies to designated financial entities under DORA scope. Condition requires documented evidence of ICT third-party risk register submission to competent authority per DORA Articles 28-29 within current review period. Evidence must include submission records and supervisory authority confirmation. No valid alternatives; missing evidence remains pending.
AI assistance prompt
Develop sixteen bounded yes/no factors for DORA: ICT third-party risk, concentration and register. Govern ICT provider arrangements, due diligence, concentration risk and the register of information. Cover third-party strategy, accountable ownership, pre-contract assessment, provider selection, conflicts, concentration and the entity/group register with applicable submissions. SFS E owns contractual clauses, subcontracting and exits; SFS F owns designated-provider oversight interactions. DORA article references: 28, 29. Verify entity-role applicability and current primary sources. Missing evidence stays pending; no compliance or assessment is implied.
Clarifications
What evidence demonstrates compliance with this requirement?
Documented submission records showing ICT third-party risk register sent to competent authority within specified timeframe per DORA Articles 28-29, plus confirmation receipts or supervisory authority acknowledgments. Internal registers without submission proof are insufficient.
References
DORA: ICT third-party risk, concentration and register