Security Awareness for ICT Third-Party Service Providers Mandatory ICT Security Training for External ICT Providers & Contractors The Security Awareness for ICT Third-Party Service Providers programme ensures that vendors, contractors, consultants and outsourced ICT professionals meet the security and behavioural requirements imposed by the Digital Operational Resilience Act (DORA). Under Article 13(6) DORA, financial entities must extend ICT security awareness training to third-party service providers where relevant, especially when they have logical or physical access to ICT systems, data, interfaces, infrastructure or critical and important functions.In parallel, Article 28–30 DORA require strong governance and contractual alignment — including third-party training as part of the ICT … Continue reading Security Awareness for ICT Third-Party Service ProvidersRead More →