DORA, the Digital Operational Resilience Act, regulates how financial services providers manage their ICT risks. But those risks are not necessary wholly contained within the financial institutions – ...

To an outsider, supply chains probably seem simple enough. Make something in one location, then ship it to a new destination, where someone receives it. Right? That’s rarely the case. Supply chains ...

The European Supervisory Authorities (ESAs) have now published their list of designated critical ICT third-party providers (CTPP) but what does this mean for the regulated firms that contract with ...