What each regime attaches to a vendor relationship
Four regimes, ticked on the register. Each page says which vendors the regime reaches, the clauses it attaches, the contract provisions it expects and what the register exports for it.
DORA, the Digital Operational Resilience Act 4 clausesthe NIS2 Directive 3 clausesNIST SP 800-161 Rev 1 19 clausesISO/IEC 27001:2022 6 clauses
Named references the register links and never quotes: EAR, the US Export Administration Regulations (the Entity List sits under it); ITAR, the US International Traffic in Arms Regulations; NIS2 Article 22, Union coordinated security risk assessments of critical supply chains (reached through Article 21(3)); ISO/IEC 27036, supplier relationships (named; not held in the corpus).