Payments and financial
Processors, banks, schemes, insurers and payroll: the parties money moves through. Concentration here is a liquidity question as much as an ICT one.
Categories in this family
5- Banking and treasury critical
The accounts money sits in and moves through, the safeguarding arrangements and the credit lines. - Card scheme and network critical
The rails and schemes the processors settle through; membership is a licence with its own rulebook. - Insurer and broker important
The carriers and the broker behind the insurance programme, and the cover that responds when a vendor failure becomes a loss. - Payment processor and gateway critical
The party that moves the money: authorises, settles and pays out, under the card schemes' and the regulator's rules. - Payroll provider and benefits critical
The party that pays the staff and files the returns, holding bank details and tax identifiers for everyone.
What reaches this family
| NIS2 | Attaches to every direct supplier and service provider of the entity, whatever it supplies; the depth of the assessment follows the access and the criticality. On every vendor here: NIS2 Art. 21(2)(d). |
|---|---|
| SP 800-161 | Attaches to every supplier, developer, integrator and service provider of a federal system, with the hardest controls on components and on privileged access. On every vendor here: SP 800-161 SR-6, SP 800-161 SR-8, SP 800-161 SA-4, SP 800-161 SR-13, SP 800-161 SA-9. |
| ISO 27001 | Attaches to every supplier relationship through controls 5.19 to 5.23, and to outsourced development through 8.30. With no regime ticked, these rows render as the default. On every vendor here: ISO 27001 5.19, ISO 27001 5.20, ISO 27001 5.22. |
| DORA | Not an ICT service in itself; recorded in the register of information only where a service element sits in the contract. |
Register the vendors in this family
Paste the list; every vendor in this family is placed in its category, given its share of spend and systems and the country it lands in, and carries the obligation rows above. Eight vendors free, no account.
Build my vendor register