Catalog
[non-validated] DORA SFS 9 / SF C: Recovery Priorities

[non-validated] DORA SFS 9 / SF C: Recovery Priorities

Generated catalog draft. No operational assessment or human approval is claimed.

[non-validated] This question has unresolved selected work.

Question

[non-validated] Has the entity documented recovery priorities for critical systems to be recovered first during outage scenarios as required by the DORA topic boundaries?

Explanation

[non-validated] Has the designated entity documented recovery priorities for critical systems to be recovered first during outage scenarios, as specified in the DORA topic boundaries?

Criterion and evidence

Verification of documented recovery priorities for critical systems during outage scenarios per topic requirements, covering system tiering and critical service sequencing.

AI assistance prompt

Develop sixteen bounded yes/no factors for DORA: Backup, restoration and recovery. Protect backup copies and demonstrate restoration and recovery against stated objectives. Cover backup scope, segregation and protection, restoration testing, recovery priorities/objectives, redundant capacity and reconciliation of recovered information. Keep business continuity policy in SFS 8 and evidence of real execution separate from proposed procedures. DORA article references: 12. Verify entity-role applicability and current primary sources. Missing evidence stays pending; no compliance or assessment is implied.

Clarifications

What constitutes sufficient evidence for recovery priorities?

Documented evidence specifying explicit recovery priority tiers for critical systems (e.g., authentication systems designated as Tier 1 to be recovered before Tier 2 transaction systems). Generic statements without system-specific sequencing are insufficient.

How are missing or inadequate recovery priorities assessed?

Absence of documented recovery priorities, or priorities failing to cover all critical services, results in a 'failed' determination. Pending status applies only when evidence is requested but not yet provided.

References

DORA: Backup, restoration and recovery

https://github.com/stefanospetsios/uniq2me/blob/1c70a85c3c2e074619c17aef2fd08be79a7e633d/json/en/9.json (opens in a new tab)