[non-validated] Termination Rights with Data Recovery for Critical Functions
Generated catalog draft. No operational assessment or human approval is claimed.
[non-validated] This question has unresolved selected work.
Question
[non-validated] Have written ICT service contracts established documented termination rights including post-termination data recovery provisions for critical functions as required by repository topic boundaries?
Explanation
[non-validated] Have written ICT service contracts established documented termination rights including post-termination data recovery provisions for critical functions as required by repository topic boundaries?
Criterion and evidence
Verify designated critical-function service providers maintain contractual termination clauses specifying data recovery procedures validated within the preceding 12 months per repository topic boundaries, distinguishing critical from non-critical requirements.
AI assistance prompt
Develop sixteen bounded yes/no factors for DORA: Provider contracts, subcontracting and exit. Maintain enforceable ICT contract controls, subcontracting oversight and tested exit arrangements. Cover contractual rights and obligations, service levels, locations/data access, audit/inspection rights, incident assistance, subcontracting changes and termination/exit strategies. Distinguish additional requirements for critical or important functions from baseline contract requirements. DORA article references: 28, 30. Verify entity-role applicability and current primary sources. Missing evidence stays pending; no compliance or assessment is implied.
Clarifications
What constitutes sufficient evidence versus insufficient evidence for termination rights validation?
Sufficient evidence requires written contracts with explicit termination clauses detailing data recovery procedures, plus validation records (e.g., 'quarterly recovery logs') demonstrating functional restoration capabilities specifically for critical functions. Insufficient evidence includes generic termination references without data recovery specifications or validation records. No alternatives satisfy this mandatory requirement under repository topic boundaries (E-repository-area#keyDescription).
References
DORA: Provider contracts, subcontracting and exit