Articles tagged “DORA”
13 min read
I supply a bank: which DORA controls will they ask me for?
DORA does not bind ICT providers directly unless they are designated critical. But the financial entity has to pass almost everything the regulation asks of it down to you through the contract. What you will be asked for depending on the service you provide, article by article, and how to have it ready.
DORAThird-party management
12 min read
When is an incident major under DORA? Criteria, thresholds and five worked cases
Under DORA, an ICT-related incident is major if it affects critical services and either there was malicious unauthorised access that may cause data losses, or two or more materiality thresholds are met. The exact thresholds, how to measure them and five cases classified step by step.
DORAIncidents