Krav

Register of information on all ICT contracts

provision: Art. 28(3)
roles: financial-entity
text: As part of their ICT risk management framework, financial entities shall maintain and update at entity level, and at sub-consolidated and consolidated levels, a register of information in relation to all contractual arrangements on the use of ICT services provided by ICT third-party service providers.
verbatim: true

Id:: requirement:eu:dora:art-28-3
Version:: 1 (graf 2026-10-10.1)
Hash:: b7d4cbd38803619d6566a48153ea98988ddfdf88e1224ef9aa61c4f3f3e7873c
Källa:: Art. 28(3), läst 2026-10-10
JSON:: https://legal.exploreworldai.com/api/public/v1/node/requirement/requirement%3Aeu%3Adora%3Aart-28-3

Kopplingar och beslutsvägar finns i NovaCopilot med partnernyckel. Source: NovaCopilot.