DORA, the EU's new Digital Operational Resilience Act, brings sharp focus to an uncomfortable truth: an organisation's operational resilience is only as strong as the weakest link in their supply chain.
From ICT dependency mapping to audit rights and vendor oversight, DORA makes third-party risk management a core business function.
In this article, I look at the key challenges around third-party and supply-chain risk management - and how the IBM Cloud ISV Validation programme and collaborative efforts of the IBM Financial Services Cloud Council are showing a way forward in terms of addressing these mission-critical issues.
https://www.contextualsolutions.de/blog/dora-third-party-risk-financial-supply-chain
------------------------------
Anne Leslie
------------------------------