DORA: ICT risk framework and assurance

Maintain a documented, approved ICT risk framework and resilience strategy with accountable review and assurance. Cover the framework, risk tolerance, strategy, independent control/assurance functions, audit follow-up and framework reviews. SFS 0 owns entity applicability and board accountability; SFS A owns staff learning and information sharing. DORA article references: 6.

• SF 0
• SF 1
• SF 2
• SF 3
• SF 4
• SF 5
• SF 6
• SF 7
• SF 8
• SF 9
• SF A
• SF B
• SF C
• SF D
• SF E
• SF F