[non-validated] DORA SFS 5: Detection Threshold Periodic Review (SF 6)
Generated catalog draft. No operational assessment or human approval is claimed.
[non-validated] This question has unresolved selected work.
Question
[non-validated] Has the entity periodically reviewed and adjusted detection thresholds for unusual activity, performance problems, and ICT incidents as documented in the repository topic allocation?
Explanation
[non-validated] For entities operating under DORA Topic 5 scope, has the repository-described periodic review and adjustment of detection thresholds for anomalous activity, performance issues, and ICT-related incidents been completed as documented in operational evidence requirements?
Criterion and evidence
Verify repository-documented evidence of scheduled threshold review cycles during current operational period for anomalous activity, performance issues, and ICT incidents per Topic 5 allocation. Excludes SFS 6/7 handling/reporting responsibilities.
AI assistance prompt
Develop sixteen bounded yes/no factors for DORA: Monitoring and anomalous activity detection. Detect anomalous activity, performance issues and ICT-related incidents using monitored evidence. Cover detection thresholds, logging, alerting, monitoring responsibilities, escalation triggers and testing of detection capability. SFS 6 owns handling/classification after detection; SFS 7 owns external reporting. DORA article references: 10. Verify entity-role applicability and current primary sources. Missing evidence stays pending; no compliance or assessment is implied.
Clarifications
What constitutes sufficient evidence for this requirement?
Repository-described maintenance logs confirming completed review intervals with timing and adjustment outcomes for detection thresholds during operational period per Topic 5 allocation.
How are missing evidence cases handled?
Treated as pending verification per repository-defined evidence parameters. Absence of documented review procedures results in unmet requirement (no valid alternatives exist).
References
DORA: Monitoring and anomalous activity detection