Third parties

The post-intake vendor lifecycle — register, assess, and continuously monitor third-party providers. DORA adds the ICT third-party register and concentration metrics automatically.

Vendor register

Inventory of third-party providers. DORA-flagged when the financial sector module is enabled.

Assessments

Periodic questionnaires, evidence requests and risk re-rating workflows.

Command palette

Search, create, and navigate