DORA Article 3(21)

Requirements imposed on financial services institutions when procuring ICT services from third parties – regulation and best practice.