Vendor Register

Network and connectivity

The links between sites, clouds and the public internet. Two carriers can share one upstream, so "two providers" is not always two paths.

Categories in this family

4

What reaches this family

DORAAttaches to contractual arrangements for ICT services: cloud, software, network, managed services and data feeds. A supply of hardware, a bank or a courier is recorded in the register only where a service element sits in the contract. On every vendor here: DORA Art. 28, DORA Art. 30.
NIS2Attaches to every direct supplier and service provider of the entity, whatever it supplies; the depth of the assessment follows the access and the criticality. On every vendor here: NIS2 Art. 21(2)(d), NIS2 Art. 21(3), NIS2 Art. 24.
SP 800-161Attaches to every supplier, developer, integrator and service provider of a federal system, with the hardest controls on components and on privileged access. On every vendor here: SP 800-161 SR-6, SP 800-161 SR-8, SP 800-161 SA-4, SP 800-161 SR-13, SP 800-161 CP-8, SP 800-161 CA-3, SP 800-161 SA-9.
ISO 27001Attaches to every supplier relationship through controls 5.19 to 5.23, and to outsourced development through 8.30. With no regime ticked, these rows render as the default. On every vendor here: ISO 27001 5.19, ISO 27001 5.20, ISO 27001 5.22, ISO 27001 5.21.

Register the vendors in this family

Paste the list; every vendor in this family is placed in its category, given its share of spend and systems and the country it lands in, and carries the obligation rows above. Eight vendors free, no account.

Build my vendor register