Managing ICT Third-Party Risk Under DORA: Beyond Traditional Vendor Management

DORA transforms ICT third-party risk management from a procurement activity into a regulatory obligation. Here's what financial institutions must do differently.