[non-validated] DORA SFS A / SF 2: Threat Intelligence Sharing Arrangements
Generated catalog draft. No operational assessment or human approval is claimed.
[non-validated] This question has unresolved selected work.
Selected updates are pending because supporting source research is incomplete. The existing catalog content is shown below.
Question
[non-validated] Has the applicable entity established documented threat intelligence sharing arrangements where required by its classification under the DORA area description?
Explanation
[non-validated] Has the entity established documented threat intelligence sharing arrangements where required by its DORA classification? Sharing participation is conditional based on entity classification; non-participation does not automatically constitute non-compliance when outside specified scope. Evidence must confirm arrangements where mandated by the DORA area description.
Criterion and evidence
Evidence period: current regulatory review period. Positive: documented arrangements compliant with entity's DORA classification per area description. Negative: absence of required arrangements. Missing evidence: pending submission of participation records. Valid alternatives: None when classification requires participation; DORA area description permits conditional participation.
AI assistance prompt
Develop sixteen bounded yes/no factors for DORA: Learning, staff readiness and information sharing. Use incident/test lessons, staff readiness and controlled information sharing to improve resilience. Cover post-incident learning, training and awareness for staff and management, relevant provider participation, intelligence sharing arrangements and applicable authority notifications. Sharing participation is conditional; non-participation is not automatically a statutory failure. SFS 1 owns framework assurance. DORA article references: 13, 45. Verify entity-role applicability and current primary sources. Missing evidence stays pending; no compliance or assessment is implied.
Clarifications
What evidence demonstrates compliant threat intelligence sharing arrangements?
Documented evidence confirming arrangements where mandated by entity classification per DORA area description. Non-participation is acceptable when outside specified scope; absence of arrangements only fails when classification requires participation.
How are missing evidence and scope applicability handled?
Pending submission of participation records when evidence is unavailable. Non-applicability due to entity classification explicitly scopes out the requirement without constituting automatic pass/failure.
References
DORA: Learning, staff readiness and information sharing