Catalog refinement

This catalog is a draft. See refinement-status.json for the selected tasks and completed SFSs.

• SFS 0: DORA: Applicability, proportionality and governance
• SFS 1: DORA: ICT risk framework and assurance
• SFS 2: DORA: ICT assets, services and dependency mapping
• SFS 3: DORA: Protection, access and data security
• SFS 4: DORA: Secure change, development and vulnerability management
• SFS 5: DORA: Monitoring and anomalous activity detection
• SFS 6: DORA: Incident management and classification
• SFS 7: DORA: Incident reporting and communications
• SFS 8: DORA: ICT business continuity and crisis response
• SFS 9: DORA: Backup, restoration and recovery
• SFS A: DORA: Learning, staff readiness and information sharing
• SFS B: DORA: Digital operational resilience testing programme
• SFS C: DORA: Threat-led penetration testing
• SFS D: DORA: ICT third-party risk, concentration and register
• SFS E: DORA: Provider contracts, subcontracting and exit
• SFS F: DORA: Critical provider oversight and supervisory readiness