Catalog
SFS 3 — Protection, access and data security

DORA: Protection, access and data security

Updates for this SFS are pending because supporting source research is incomplete. Existing catalog content is shown.

Protect ICT systems and information through proportionate access, data and network safeguards. Cover identity and access controls, authentication, least privilege, cryptography, data security, physical/environmental safeguards and network segregation. Apply the relevant standard or simplified framework. SFS 4 owns change/patch lifecycle; SFS 5 owns detection. DORA article references: 9, 15.