← Toolkit
TPL-101RegisterThird-party riskOperational resilience

DORA register of information

Relational structure: entities, arrangements, providers, functions, sub-outsourcing.

The regulation's most underestimated deliverable. The workbook reproduces the linked-table structure the authorities expect, with the consistency checks that prevent rejections: legal entity identifiers, links to functions, sub-outsourcing chains.

How to use it

  • Inventory all ICT arrangements, not just material outsourcing
  • Obtain legal entity identifiers at collection time
  • Maintain through the procurement process, not an annual campaign

Courses that use it

DR-101

DORA at a glance

DR-301

ICT third-party risk and register of information

Related templates

TPL-050

Important business services register

Client-side phrasing, owner, tolerance, measured capability, gap.

TPL-051

Annual resilience self-assessment

The document the board approves and the supervisor requests.

TPL-052

End-to-end dependency map

Six layers, one row per dependency, sortable by substitutability.

TPL-053

Single point of failure register

Qualification, treatment or explicit acceptance, with review date.