DORARegulation (EU) 2022/2554

Definition: ICT third-party risk: ICT third-party risk

DORA Art. 3 (ICT third-party risk)

Open it in the interactive map Official text on EUR-Lex

an ICT risk that may arise for a financial entity in relation to its use of ICT services provided by ICT third-party service providers or by subcontractors of the latter, including through outsourcing arrangements

Defines (1)

Article 3

Source texts: the Official Journal, through the Publications Office. Dataset built 2026-07-29. Study aid, not legal advice.

DORA 32022R2554

Every connection on this page is drawn from the official text of Regulation (EU) 2022/2554. Study aid, not legal advice.

See how DORA sits beside the other three acts on the crossover map, or find what your role must do in the obligations checklist.

Useful to someone you work with?

Credential program

Earn a verifiable AI governance credential. Every lesson is free.

Seeing how four regimes overlap is the easy half. Deciding what your organization actually does about it is the half that gets audited.

Certified AI Governance Professional (CAIGP) is fourteen modules of exactly that work: you run an organization through the AI era, make decisions that can fail, and leave with a record an employer can verify.

14 modules, 98 topics, each with a lesson and a graded quiz.
Opens with “Why decisions, not information, will make you the expert”, and every lesson is free with a free account.
The Professor on every topic: a first look free, one on one on every topic when you certify.
A mastery exam at the end, then a credential anyone you send it to can verify.
Your progress is saved to your account, on any device.

To start

Free

A free account opens every lesson in this program and starts a practice record of your quiz scores. No card is asked for.

Start learning freeRead the full description

Back to the graph

GAGE briefings tell you which AI regulation deadlines are coming, what they actually require of you, and when a program opens.

Definition: ICT third-party risk: ICT third-party risk

Defines (1)

Readers of this also ask