Tag
ict-third-party
Safeguard articles tagged "ict-third-party" — guides, analysis, and best practices for software supply chain and application security.
2 articles
Compliance
DORA Concentration Risk: ESAs' Designation of Critical ICT Third-Party Providers
DORA Article 31 lets the ESAs designate critical ICT third-party providers (CTPPs) for direct EU-level oversight. First designations land in 2025-2026 from the Register of Information.
Jul 26, 20268 min read
Regulation
DORA Subcontracting RTS: Inside Commission Delegated Regulation 2025/532
The DORA subcontracting RTS adopted on 24 March 2025 governs how ICT third-party providers may subcontract critical or important functions, in force from 22 July 2025.
Jun 11, 20266 min read
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.