Third-Party Risk Management (TPRM) for DORA and supply-chain resilience

Supervisors no longer accept a vendor spreadsheet rebuilt in December. Third parties is the programme: who you depend on, how they are assessed, what the contract says, where concentration sits, and how you exit.