[non-validated] DORA SFS 8 / SF D: Internal Communication Coordination Protocols
Generated catalog draft. No operational assessment or human approval is claimed.
[non-validated] This question has unresolved selected work.
Question
[non-validated] Has the entity documented internal communication protocols specifying roles and responsibilities for team coordination during ICT disruptions within business continuity arrangements as required by DORA Article 11?
Explanation
[non-validated] Has the entity documented internal communication protocols specifying roles and responsibilities for team coordination during ICT disruptions within business continuity arrangements as required by DORA Article 11?
Criterion and evidence
Financial entities designated under Regulation (EU) 2022/2554 must maintain documented internal communication protocols specifying roles and responsibilities within business continuity arrangements per DORA Article 11. Evidence period corresponds to current operational cycle. Verified through documented continuity arrangements covering response/recovery plans (distinct from crisis management activation in SF 5).
AI assistance prompt
Develop sixteen bounded yes/no factors for DORA: ICT business continuity and crisis response. Maintain and test continuity and response arrangements for critical functions and disruptive scenarios. Cover business impact analysis, continuity policy, response/recovery plans, crisis management, activation, dependencies and continuity exercises. SFS 9 owns backup/restore controls; SFS B owns the wider resilience test programme. DORA article references: 11. Verify entity-role applicability and current primary sources. Missing evidence stays pending; no compliance or assessment is implied.
Clarifications
What constitutes sufficient evidence for this requirement?
Documented business continuity arrangements explicitly describing internal team communication procedures, role assignments, and incident notification channels for critical ICT disruptions within the response/recovery plans framework. Evidence must distinguish from crisis management activation (SF 5) and continuity exercises (SF 8). Missing documentation defaults to pending status.
References
DORA: ICT business continuity and crisis response