All our third-party-risk news
DORA
DORA ICT Risk Management Framework: Complete Practitioner Guide for Financial Institutions and Their Insurers in 2026
Comprehensive guide to the Digital Operational Resilience Act (DORA) ICT risk management framework. Covers all 5 pillars, compliance requirements, underwriting implications, and the intersection with NIS2 for EU financial institutions.
Michael Guiao
16 min read
NIS 2 · · 10 min read
NIS2 Supply Chain Security Requirements: Third-Party Risk Management Guide for 2026
NIS2 Article 21 mandates supply chain security for all essential and important entities. Complete guide to third-party risk assessments, vendor security clauses, supply chain vulnerability monitoring, and compliance evidence — with free checklist and implementation templates.
Supply Chain · · 9 min read
When the Underwriter Becomes the Target: Supply Chain Attacks Are Coming for Insurance
Insurers price everyone else's supply chain risk. Now the same attacks target underwriting infrastructure itself — pricing models, portfolios, and TPAs.
blog.featured
AI Tooling RCE: The Sublimit Layer Underwriters Rarely Underwrite
Cyber Insurance ·
9 min read
SolarWinds SAML Bypass: The IT Ticketing Supply-Chain Path
Cyber Insurance ·
9 min read
AM Best and S&P Flag Cyber Pricing Risks: What Underwriters Should Do at Renewal
Cyber Insurance ·
7 min read
One Salesforce Integration Breach Just Hit 200 Cyber Insureds
Cyber Insurance ·
8 min read
Premium Report
2026 Cyber Risk Landscape Report
24 pages of threat analysis, claims data, and underwriting implications for European cyber insurance.
View Reports →