EBA issues guidelines on non-IT subcontractor risk, extending DORA-style oversight

The European Banking Authority published guidelines on managing risks from non-IT subcontractors, harmonizing with the DORA regulatory framework. This extends strict third-party risk management requirements beyond IT services to all critical outsourcing, increasing compliance burden for EU financial institutions. The move signals continued regulatory tightening in the EU financial sector.