ICT Third-Party Risk

ICT third-party risk covers the identification, assessment, and control of external technology providers involved in software delivery and operations. In regulated environments, this includes managing supplier criticality, contractual obligations, monitoring, audit rights, and exit strategies as required by regulations such as DORA Article 28 and NIS2.

Supplier Governance & CI/CD Controls Checklist — Including the Strict Auditor Version

by
Supplier Governance & CI/CD Controls Checklist — Including the Strict Auditor Version

A supplier-governance and CI/CD controls checklist for regulated pipelines, now including a stricter auditor worksheet with per-control evidence references and a formal auditor decision block.