[non-validated] DORA SFS A / SF 1: Security awareness training implementation [draft]
Generated catalog draft. No operational assessment or human approval is claimed.
[non-validated] This question has unresolved selected work.
Selected updates are pending because supporting source research is incomplete. The existing catalog content is shown below.
Question
[non-validated] For applicable DORA entities, have documented security awareness training programs covering all staff levels been implemented per DORA requirements during the current regulatory period?
Explanation
[non-validated] Has the designated critical entity implemented documented security awareness training covering all staff levels during the current review period per DORA Article 13 requirements?
Criterion and evidence
Verifies implementation of mandatory Article 13 security awareness training for designated critical entities, requiring documented evidence across management, operational, and technical staff levels with no permissible alternatives. Evidence period aligns with current regulatory review cycle.
AI assistance prompt
Develop sixteen bounded yes/no factors for DORA: Learning, staff readiness and information sharing. Use incident/test lessons, staff readiness and controlled information sharing to improve resilience. Cover post-incident learning, training and awareness for staff and management, relevant provider participation, intelligence sharing arrangements and applicable authority notifications. Sharing participation is conditional; non-participation is not automatically a statutory failure. SFS 1 owns framework assurance. DORA article references: 13, 45. Verify entity-role applicability and current primary sources. Missing evidence stays pending; no compliance or assessment is implied.
Clarifications
What constitutes sufficient evidence?
Documented training schedules with version control covering all staff tiers during evidence period, plus verified attendance/completion records. Partial coverage is insufficient.
How is missing evidence handled?
Pending status maintained until complete records covering 100% of staff levels are submitted. Article 13 mandates all tiers without exceptions.
References
DORA: Learning, staff readiness and information sharing