Operational and systemic exposure arising from dependence on a single ICT third-party service provider or a small group of non-substitutable providers.
Defined in / by
Last updated: 22 August 2026.
Glossary term
Concentration risk
What does "Concentration risk" mean under DORA?