← Glossary
Third-party risk
Concentration risk
In French : Risque de concentration
Exposure arising from dependence on a hard-to-substitute provider, or on several interlinked providers, for a critical function.
Source : Règlement (UE) 2022/2554, art. 29
Related terms
Register of information
A structured inventory of all contractual arrangements on the use of ICT services provided by third parties, submitted annually to the competent authority.
Exit strategy
A documented plan to terminate an outsourcing arrangement without interrupting service delivery or breaching regulatory requirements. It must be established before signature.