[non-validated] DORA SFS B / SF E: Senior Management Communication (Repository Topic Documentation)
Generated catalog draft. No operational assessment or human approval is claimed.
[non-validated] This question has unresolved selected work.
Question
[non-validated] Has the entity documented and communicated the results of its operational resilience testing to senior management during the review period?
Explanation
[non-validated] Has the entity documented and communicated the results of its operational resilience testing to senior management during the review period as defined in repository topic documentation?
Criterion and evidence
Verify evidence of test results communication to senior management with dated documentation within the review period as specified in repository topic boundaries. Missing evidence results in pending status; no valid alternatives satisfy repository-defined requirements under current scope.
AI assistance prompt
Develop sixteen bounded yes/no factors for DORA: Digital operational resilience testing programme. Maintain a risk-based testing programme, findings register and verified remediation. Cover test planning, independence, relevant systems/functions, suitable test types, remediation and closure evidence. Distinguish ordinary testing requirements from the conditional advanced TLPT regime in SFS C. DORA article references: 24, 25. Verify entity-role applicability and current primary sources. Missing evidence stays pending; no compliance or assessment is implied.
Clarifications
What constitutes sufficient evidence?
Documented test reports dated within review period showing formal communication to senior management as specified in repository topic documentation. Pending status applies when no communication records or fragmented evidence exists per repository topic documentation.
How are alternatives handled?
No valid alternatives satisfy the repository-defined requirement per current topic boundaries; documented communication to senior management is mandatory under repository-specified evidence rules.
References
DORA: Digital operational resilience testing programme