DORA · Art.28
DORA Art.28 - third-party ICT risk register
This control asks you to show: third-party ICT risk register. The EU Digital Operational Resilience Act for banks, insurers and their technology suppliers.
What evidence passes
The check reads the field
third_party_register in the decision or governance record. It passes when that field is present and not empty. Anything else fails, with the reason stated.Check it now
Free, no account. You get PASS or FAIL, the reason, and a tamper-evident receipt.
Run it from your AI assistant
Connect
https://sebbi.pro/mcp to Claude, ChatGPT, Cursor or any MCP app, then call:sebbi_run_check {"check": "sebbi_dora_015", "record": {"third_party_register": "..."}}Or run every DORA control at once with sebbi_run_framework. How to connect