VOCE Agent Conformance · EU-06

Third-party ICT and model dependency register

Where sector rules require it, are critical external technology and model dependencies included in the institution's third-party risk records?

European regulatory overlayA3+CriticalPermanent control URL

Normative wording

EU-06 · Third-party ICT and model dependency register

Where sector rules require it, are critical external technology and model dependencies included in the institution's third-party risk records?

DomainEuropean regulatory overlay

Expected ownerThird-party Risk / Procurement

Minimum maturityA3+

CriticalityCritical

Target evidence stateVerified in operation

Expected evidence

Supplier register
Criticality assessment
Contract/exit record

Method

How to read this control.

This control belongs to VOCE Agent Conformance. Its identifier and normative wording remain identical across language versions so there is one reference, not three variants. Status depends on dated evidence, not a vendor declaration or aggregate score.

Open Agent Conformance →