[non-validated] DORA SFS 4 / SF 2 (placeholder)
Generated catalog draft. No operational assessment or human approval is claimed.
[non-validated] This question has unresolved selected work.
Question
[non-validated] [Placeholder] Has DORA condition 2 in "DORA: Secure change, development and vulnerability management" been evidenced?
Explanation
[non-validated] DORA authoring placeholder; this is not an assessment.
Criterion and evidence
Define the applicable entity role, condition, evidence period and decision rule from verified DORA sources.
AI assistance prompt
Develop sixteen bounded yes/no factors for DORA: Secure change, development and vulnerability management. Control ICT changes, software/system development, vulnerabilities and patching. Cover acquisition and development controls, testing before deployment, change approval, emergency changes, patching, vulnerability treatment and supported-system lifecycle. Use the applicable ICT-risk technical standards; do not substitute a generic development maturity score. DORA article references: 7, 9, 15. Verify entity-role applicability and current primary sources. Missing evidence stays pending; no compliance or assessment is implied.