article thumbnail

Preparation Continues for the Digital Operational Resilience Act

Fusion Risk Management

Currently, TSPs are subject to financial service providers’ requirements via contractual obligations (such as the European Banking Authority’s third-party outsourcing requirements). It formalizes existing third-party outsourcing requirements and provides more prescriptive guidance on regulatory expectations. Audit Access.

article thumbnail

TSPs: Making the Case to Invest in Risk and Resiliency

Fusion Risk Management

A bottom-up approach occurs when teams are issue spotting via speaking up about issues that they are encountering, control testing, or remediating audit findings. Your customer may ask you to meet a specific SLA in the event of a data breach so that they can activate their incident management processes . Contractual Obligations.