NS-CTAF for Banks & FinTech
Assess ICT supplier risk, software supply chain risk, and operational resilience.
The trust problem
Regulators (DORA, NIS2) require evidence-backed control over ICT and software supply chain risk.
Priority domains
- D4 Dependency & Supply Chain
- D6 Governance
- D2 Integrity
Target level
CTA-3 Assured
Satisfy operational-resilience obligations and standardise supplier assurance.
Turn software assurance into an external trust signal.
Fixed fee $5,000 USD · ~20 business days · Final report, CTA certificate, and improvement roadmap.