+Third-party Risk Management
---+Third-party Due Diligence and Selection
------+Suitability Criteria
------+Selection Criteria
---+Third-party (Standard) Contract Management
------+Termination Rights and Conditions
------+Service Level Management
------+Service Locations and Data Processing
------+Cooperation in Incident Response
------+Participation in Security Awareness Programs
---+Third-party (Critical) Contract Management
------+(Critical) Service Level Management
------+Contractual Clauses
------+Third-party Critical Subcontracting Management
---+Third-party Risk Management
------+Third-party Risk Management
------+Pre-Contract Risk Assessment
------+Register of Information
------+Contractual Requisites
------+Exit strategies
------+Annual Reporting of New Arrangements
---+Subcontracting Management
------+Third-Party Subcontractor Due Diligence
------+Subcontracting Risk Management
------+Subcontracting Monitoring

Third-party Risk Management

None

1. Преглед

Third-party Due Diligence and Selection None
Third-party (Standard) Contract Management None
Third-party (Critical) Contract Management None
Third-party Risk Management None
Subcontracting Management None

1.1 Препратки

1.2 Идентифицирани изисквания

1.3 Свързани регулации

2. Идентифицирани изисквания

Изисквания

3. Свързани регулации

Регулации
  • NOREA -

    EN: DORA in Control Framework of NOREA, the Dutch professional association of IT auditors, https://www.norea.nl/. © NOREA. Reproduced with the permission of NOREA; converted into the GRCA format. Only the version published by NOREA is authoritative.

    DE: DORA in Control Framework von NOREA, dem niederländischen Berufsverband der IT-Auditoren, https://www.norea.nl/. © NOREA. Wiedergabe mit Genehmigung von NOREA; in das GRCA-Format umgewandelt. Maßgeblich ist allein die von NOREA veröffentlichte Fassung.