Compliance Breakfast: ICT Third-Party Risk Management within DORA

Digital transformation is advancing, and with it, the reliance on external ICT service providers is growing. For financial institutions, this means increased complexity in risk management and rising demands on their operational resilience. The EU DORA (Digital Operational Resilience Act) regulation addresses exactly this and, among other things, calls for a close integration of ICT third-party management with Business Continuity Management (BCM).

Meeting this challenge effectively requires more than just theoretical knowledge: clear responsibilities, well-designed processes, and strong collaboration between key functions (from IT and BCM to compliance) are essential.

In our Compliance Breakfast “ICT Third-Party Risk Management within DORA – the role of business continuity management” on 26 June 2025 from 09:00 to 09:30 a.m., you will learn:

• Which interfaces exist between ICT third party risk management and BCM
• What requirements DORA places on exit strategies

Gain valuable insights and practical guidance to ensure DORA compliance and strengthen your resilience in the long term. Take this opportunity to exchange ideas with experts and peers from the industry!

We look forward to your participation and are eager to hear your perspectives and questions.