DORA ICT Risk Management Assessment

Do you have an ICT risk management framework that identifies, classifies, and mitigates ICT risks? (DORA Art. 6)

Do you maintain an up-to-date inventory of ICT assets and their dependencies? (DORA Art. 8)

Describe your ICT-related incident management and classification procedures (DORA Art. 17).

Do you conduct regular digital operational resilience testing including penetration testing? (DORA Art. 24-27)