[non-validated] DORA SF F: Incident Management Framework
Generated catalog draft. No operational assessment or human approval is claimed.
[non-validated] This question has unresolved selected work.
Question
[non-validated] Has the financial entity established a documented ICT incident management framework covering accountable workflows, ownership, tracking, prioritisation and classification criteria as required by DORA Articles 17 and 18?
Explanation
[non-validated] Has the financial entity established documented mechanisms and policies for handling all ICT-related incidents as required by DORA Articles 17 and 18, covering accountable workflows, ownership, tracking, prioritisation and classification criteria?
Criterion and evidence
Verify documented implementation of complete ICT incident management framework (workflows, ownership, tracking, prioritisation, classification) per DORA Articles 17-18. Evidence must include implementation logs showing application to real incidents. Source: repository topic allocation; not externally verified.
AI assistance prompt
Develop sixteen bounded yes/no factors for DORA: Incident management and classification. Record, handle and classify ICT-related incidents and significant cyber threats using an accountable process. Cover incident handling workflows, ownership, tracking, prioritisation, root cause and classification criteria. Distinguish ordinary incidents, major ICT-related incidents and significant cyber threats. SFS 7 owns reporting deadlines, forms and recipients. DORA article references: 17, 18. Verify entity-role applicability and current primary sources. Missing evidence stays pending; no compliance or assessment is implied.
Clarifications
What constitutes sufficient evidence for this requirement?
Documented incident management policy referencing DORA Articles 17-18 with implementation logs showing all accountable process components (workflows, ownership, tracking, prioritisation, classification) applied to real incidents. Missing implementation records render evidence incomplete.
References
DORA: Incident management and classification