[non-validated] DORA: Repository-Defined Microenterprise Threshold Verification
Generated catalog draft. No operational assessment or human approval is claimed.
[non-validated] This question has unresolved selected work.
Question
[non-validated] Does the entity meet repository-defined microenterprise size thresholds qualifying it for exemption from specific ICT risk management requirements under DORA applicability guidance?
Explanation
[non-validated] Does the entity meet repository-defined microenterprise size thresholds qualifying it for exemption from specific ICT risk management requirements under DORA applicability guidance?
Criterion and evidence
Verify documented evidence of entity size metrics meeting repository-defined microenterprise thresholds to determine applicability of simplified ICT risk management framework under topic scope guidance.
AI assistance prompt
Develop sixteen bounded yes/no factors for DORA: Applicability, proportionality and governance. Identify the assessed legal entity, its DORA role, applicable regime and management-body accountability. Determine financial-entity category, exemptions, group boundary, size and proportionality; distinguish the standard and simplified ICT frameworks and the role of non-critical versus designated critical ICT providers. Cover management-body ownership, resourcing and ICT-risk oversight. Do not treat every provider as directly subject to every financial-entity obligation. DORA article references: 1, 2, 3, 4, 5, 16. Verify entity-role applicability and current primary sources. Missing evidence stays pending; no compliance or assessment is implied.
Clarifications
What evidence validates microenterprise status under repository criteria?
Documented size metrics (e.g., staffing levels, financial indicators) demonstrating compliance with repository-defined microenterprise thresholds. Evidence must confirm exclusion of non-applicable ICT controls per topic scope guidance without referencing unverified national instruments.
How are alternatives handled for this criterion?
No valid alternatives exist. Microenterprise exemptions are strictly defined by repository-specified size thresholds with no substitutable approaches. Undocumented claims or incorrect threshold application constitute failures.
References
DORA: Applicability, proportionality and governance