[non-validated] DORA SFS E / SF D: Termination rights and exit strategies (baseline)
Generated catalog draft. No operational assessment or human approval is claimed.
[non-validated] This question has unresolved selected work.
Question
[non-validated] Have written ICT service contracts established documented termination rights and exit strategies for baseline ICT functions as required by DORA Articles 28 and 30?
Explanation
[non-validated] Does the entity's written ICT service contracts for baseline functions include documented termination rights and exit strategies as required by DORA Articles 28 and 30, with evidence covering the preceding 12 months and explicit distinction from critical function requirements?
Criterion and evidence
Verify documented contractual termination clauses and validated exit strategy implementation for baseline ICT functions per repository topic boundaries (E-repository-area#keyDescription), excluding critical function enhancements. Evidence period: preceding 12 months. Repository templates remain unverified draft content; no legal verification performed.
AI assistance prompt
Develop sixteen bounded yes/no factors for DORA: Provider contracts, subcontracting and exit. Maintain enforceable ICT contract controls, subcontracting oversight and tested exit arrangements. Cover contractual rights and obligations, service levels, locations/data access, audit/inspection rights, incident assistance, subcontracting changes and termination/exit strategies. Distinguish additional requirements for critical or important functions from baseline contract requirements. DORA article references: 28, 30. Verify entity-role applicability and current primary sources. Missing evidence stays pending; no compliance or assessment is implied.
Clarifications
What constitutes sufficient evidence for baseline termination/exit strategies?
Written contracts must specify termination procedures with documented evidence of validated exit strategy implementation (e.g., data restoration tests for baseline functions), distinct from critical function requirements per repository topic boundaries.
How are missing evidence cases handled?
Pending submission of contractual documentation showing termination rights and validated exit strategy implementation; generic clauses without validation evidence constitute failure.
References
DORA: Provider contracts, subcontracting and exit