DORA and the Register of Information: Where a Messaging Provider Lands in a Bank's ICT Third-Party Register
DORA treats the provider behind payment OTP, SCA challenges, and fraud alerts as a reportable ICT third-party dependency. A one-page scope summary, the register row a communications provider occupies, the evidence artefacts to demand before signing, and a 12-month preparation timeline for EU financial firms.
- DORA
- EU regulation
- financial services
- ICT third-party risk
- register of information
- OTP
- strong customer authentication
- compliance
- procurement