Krav

Strategy on ICT third-party risk reviewed by the management body (summary)

provision: Art. 28(2)
roles: management-body
text: Financial entities other than microenterprises adopt and regularly review a strategy on ICT third-party risk, including a policy on ICT services supporting critical or important functions; the management body regularly reviews the risks of those arrangements.
verbatim: false

Id:: requirement:eu:dora:art-28-2
Version:: 1 (graf 2026-10-10.1)
Hash:: e6dd5c7c1b11983c0d6c3ce744bd6a961a6426c8cc18db3cfc3ef9775dd205b7
Källa:: Art. 28(2), läst 2026-10-10
JSON:: https://legal.exploreworldai.com/api/public/v1/node/requirement/requirement%3Aeu%3Adora%3Aart-28-2

Kopplingar och beslutsvägar finns i NovaCopilot med partnernyckel. Source: NovaCopilot.