Working through DORA Article 28: third-party obligations, the contract checklist, and what the auditor asks for
DORA Article 28 sets the third-party obligations; the contract clauses live in Article 30. Each subsection mapped to ISO 27001 and SCF controls.