Register of information (DORA)
DORA's required record of every contract for ICT services from third-party providers, by function.
Under DORA, the EU Digital Operational Resilience Act, financial entities must maintain and update a register of information on all contractual arrangements for ICT services provided by ICT third-party service providers, distinguishing those that support critical or important functions. The firm remains fully responsible for compliance when it uses such services. For an agent stack, each external model API, hosted agent platform, tool server and data provider is an arrangement to record.
Agent Minute explains this term on 28 February 2027.
Related terms
Third-party risk managementManaging the risks of relying on outside providers across the relationship, from due diligence to exit.Model riskThe potential for adverse consequences from decisions based on model outputs, including misuse of a sound model.Change managementControlling changes to a model or agent so each change is assessed, approved, recorded and reversible.Model inventoryA firm-wide record of the models in development or in use, with enough detail to understand their risks.