Blog
Regulations and compliance
What regulators expect, region by region.
2 posts
Regulations and compliance
DORA register of information: what goes in it
The DORA register of information records every ICT third-party contract, the functions it supports and the subcontractors behind critical ones. Here is what it holds, who reports it and how to gather the data.
Ravi · VendRisk360 Marketing Team6 min read
Regulations and compliance
Interagency third-party guidance (OCC 2023-17), explained
The 2023 interagency guidance tells US banks to manage third parties across five life-cycle stages, with stronger oversight for critical activities. Here is what it asks, what examiners check and what is changing.
Ravi · VendRisk360 Marketing Team7 min read
Get started
See VendRisk360 on your own vendors
A tailored walkthrough with a third-party risk specialist, built around your program, your regulators and your vendors.