The ICT Providers register (open it from Third-Party Risk › ICT Providers) is the master list of every ICT third-party service provider your organisation relies on. It is the backbone of DORA third-party risk management: providers registered here feed the Register of Information, the concentration analysis, and every questionnaire campaign, and they can be linked to the ICT assets they supply.
The provider list
Each provider is shown as a row with the following columns:
| Column | Description |
|---|---|
| Provider | The provider trading name, with its full legal entity name shown beneath. |
| Type | A short description of the service supplied (for example Cloud infrastructure, Core banking platform, AML/KYC screening, or Cybersecurity SOC/SIEM). |
| Country | The ISO country code of the provider jurisdiction. |
| Criticality | A colour-coded badge: Critical (red), Important (amber) or Supporting (grey), reflecting how essential the provider is to your critical or important functions. |
| Contracts | The number of active contractual arrangements recorded for the provider. |
| LEI | The Legal Entity Identifier, required for the DORA Register of Information. |
| Actions | Edit or delete the provider record. |
A search box and an All criticality filter let you narrow a long register to the providers you care about.
Adding or editing a provider
Click Add provider to register a new one, or the edit icon on any row to update it. A provider record captures its trading and legal name, the type of service it supplies, its country, its criticality rating, and its LEI. Once saved, the provider becomes selectable when you send a questionnaire and when you record an ICT asset, and it is counted in the concentration analysis.