On September 30, 2025, the “DORA and ICT Subcontracting” webinar, organized by Diritto Bancario, took place, offering an in-depth analysis of the management of ICT risk related to the “sub-supply” of ICT services by financial intermediaries.
The webinar addressed several critical aspects of ICT risk management, with a particular focus on the need for intermediaries to conduct thorough analyses, including due diligence and monitoring of ICT suppliers and subcontractors. The discussion highlighted key issues such as defining the scope of information to be gathered, the level of trust that can be placed in subcontractors’ analyses conducted by the primary supplier, the scope of checks in cases of supply chains, and the importance of negotiating appropriate contractual protections.
In an increasingly stringent regulatory environment, such as that introduced by the Digital Operational Resilience Act (DORA), the correct management of ICT subcontracting has become a crucial component for ensuring overall digital resilience and mitigating cybersecurity risks. Recent regulations require significant efforts from financial intermediaries to maintain control over all stages of ICT service supply and subcontracting, ensuring that high standards of security and reliability are upheld.
The webinar featured two LEXIA experts, Angelo Messore, Partner, and Teresa Mattioli, Ph.D., Of Counsel, who shared their expertise in assisting financial intermediaries with DORA implementation and negotiating contracts with ICT service providers. Their contributions provided a comprehensive overview of best practices and key challenges in managing ICT subcontracting, offering practical solutions for addressing regulatory challenges.
This event served as an important opportunity for industry professionals to stay informed, strengthening awareness of digital operational resilience and the need for careful and strategic management of ICT risks.
