Catalog refinement
This catalog is a draft. See refinement-status.json for the selected tasks and completed SFSs.
- SFS 0: DORA: Applicability, proportionality and governance
- SFS 1: DORA: ICT risk framework and assurance
- SFS 2: DORA: ICT assets, services and dependency mapping
- SFS 3: DORA: Protection, access and data security
- SFS 4: DORA: Secure change, development and vulnerability management
- SFS 5: DORA: Monitoring and anomalous activity detection
- SFS 6: DORA: Incident management and classification
- SFS 7: DORA: Incident reporting and communications
- SFS 8: DORA: ICT business continuity and crisis response
- SFS 9: DORA: Backup, restoration and recovery
- SFS A: DORA: Learning, staff readiness and information sharing
- SFS B: DORA: Digital operational resilience testing programme
- SFS C: DORA: Threat-led penetration testing
- SFS D: DORA: ICT third-party risk, concentration and register
- SFS E: DORA: Provider contracts, subcontracting and exit
- SFS F: DORA: Critical provider oversight and supervisory readiness