Tag
ict-third-party
Safeguard articles tagged "ict-third-party" — guides, analysis, and best practices for software supply chain and application security.
2 articles
Compliance
DORA Concentration Risk: ESAs' Designation of Critical ICT Third-Party Providers
DORA Article 31 lets the ESAs designate critical ICT third-party providers (CTPPs) for direct EU-level oversight. First designations land in 2025-2026 from the Register of Information.
Nov 26, 20258 min read
Regulation
DORA Subcontracting RTS: Inside Commission Delegated Regulation 2025/532
The DORA subcontracting RTS adopted on 24 March 2025 governs how ICT third-party providers may subcontract critical or important functions, in force from 22 July 2025.
Sep 2, 20256 min read
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.