Building a Hyperscaler Dependency Register After the CTP Designations

With the UK’s first critical third parties now under oversight, firms need to know exactly which important business services ride on a designated cloud provider. Here is a reference design for a register that answers that at region and service granularity.

Cloud Concentration Risk Under DORA, SS1/21 and the CTP Regimes

A practical reading of cloud concentration risk under DORA’s CTPP regime, the PRA’s SS1/21, and the UK Critical Third Party framework — written for the financial firms that depend on a small number of hyperscaler clouds and need to demonstrate they have thought about it. The financial services sector’s dependence on a small number of …

Read more

Book a Pillar 04 - Dependency Mapping scoping call