[non-validated] DORA SFS 7 / SF C: Internal Incident Response Communication Protocols
Generated catalog draft. No operational assessment or human approval is claimed.
[non-validated] This question has unresolved selected work.
Question
[non-validated] Has the financial entity established documented internal communication protocols for incident response teams during operational or payment-security incidents as specified in the DORA topic allocation documentation?
Explanation
[non-validated] Assesses whether the financial entity has established documented internal communication protocols for incident response teams during operational or payment-security incidents, as specified in the repository topic allocation documentation.
Criterion and evidence
Verification requires documented procedures specifying internal communication protocols (escalation paths, roles, notification channels) for incident response teams during operational/payment-security incidents per repository topic allocation documentation. Evidence must be dated after repository topic publication; no alternatives accepted.
AI assistance prompt
Develop sixteen bounded yes/no factors for DORA: Incident reporting and communications. Notify and report applicable incidents using current competent-authority requirements and communication plans. Cover initial/intermediate/final reports, voluntary significant-threat notifications, delegated reporting responsibilities, client/stakeholder communication and applicable operational/payment-security incidents. Verify current RTS/ITS timing and templates from sources; do not invent deadlines or assume one authority for every entity. DORA article references: 14, 19, 20, 21, 22, 23. Verify entity-role applicability and current primary sources. Missing evidence stays pending; no compliance or assessment is implied.
Clarifications
What constitutes sufficient evidence for this requirement?
Documented internal procedures confirming communication protocols among incident response teams during operational/payment-security incidents as specified in repository topic allocation documentation.
Are alternatives to internal communication protocols permitted?
No valid alternatives satisfy the requirement; repository topic allocation mandates internal incident response team communication protocols without substitution.
References
DORA: Incident reporting and communications