[non-validated] DORA SFS B / SF A: Verified Remediation Evidence
Generated catalog draft. No operational assessment or human approval is claimed.
[non-validated] This question has unresolved selected work.
Question
[non-validated] Has the entity documented evidence verifying that all identified test findings were remediated within contractual timelines during the review period?
Explanation
[non-validated] Does the designated digital service provider under DORA maintain documented evidence verifying all identified operational resilience test findings were remediated as required by Article 24?
Criterion and evidence
Verification that the entity maintains DORA Article 24-compliant operational resilience testing programme with documented findings register showing verified remediation evidence. Scope covers risk-based testing programme, findings register and verified remediation (excluding advanced TLPT regime in SFS C).
AI assistance prompt
Develop sixteen bounded yes/no factors for DORA: Digital operational resilience testing programme. Maintain a risk-based testing programme, findings register and verified remediation. Cover test planning, independence, relevant systems/functions, suitable test types, remediation and closure evidence. Distinguish ordinary testing requirements from the conditional advanced TLPT regime in SFS C. DORA article references: 24, 25. Verify entity-role applicability and current primary sources. Missing evidence stays pending; no compliance or assessment is implied.
Clarifications
What constitutes sufficient evidence for verified remediation?
Documented findings register showing completed remediation actions with verification evidence per DORA Article 24 requirements. Evidence must cover all test findings with validation method. Missing verification evidence results in pending assessment.
How are remediation completion criteria evaluated?
Assessment requires documented verification that remediation actions were completed and validated. Absence of documented verification constitutes failure per repository-specified criterion.
References
DORA: Digital operational resilience testing programme