DORA, the Digital Operational Resilience Act
Attaches Article 11 (response and recovery) to every site of a financial entity and Article 12 (backup, restoration and recovery) to the sites whose link is intermittent or absent; a site with no recovery objective is a finding.
On the register, tick "DORA financial entity" and these rows appear on every site. Source framework: DORA, the Digital Operational Resilience Act.
How the duties attach
| Reaches | Every site. |
|---|---|
| every site | Art. 11 |
| link intermittent | Art. 12 |
| no link | Art. 12 |
The recovery objective
With DORA ticked, every line without a recovery time objective (an RTO column, or "rto 4h" on the line) raises the finding "financial entity site with no recovery objective", because Articles 11 and 12 ask for response and recovery plans and restoration procedures with objectives for the ICT systems wherever they run. The continuity sheet lists the sites by link with the recovery rows beside them.
The clauses, quoted
2 of 26 in the frameworkRequirement text drawn from the compliance.theartofservice.com corpus, read against the held text of each standard: the corpus statement of each clause, not the instrument verbatim.
DORA Art. 11 Response and recoveryFinancial entities shall put in place an ICT business continuity policy and ICT response and recovery plans (including measures, procedures and arrangements) to ensure continuity of critical or important functions, quickly contain damage, resume activities and recover, subject to regular testing.
Common gap: No ICT continuity/response/recovery plans
Source framework: DORA (Regulation (EU) 2022/2554)
DORA Art. 12 Backup policies and procedures, restoration and recoveryFinancial entities shall develop and document backup policies and procedures, and restoration and recovery procedures and methods, ensuring backups can be restored with minimal disruption, with backup systems physically and logically segregated from the source system.
Common gap: No tested backups
Source framework: DORA (Regulation (EU) 2022/2554)
See what it attaches to your list
Paste the site list, tick the regime, and every site it reaches carries these rows by its exposure, link, data and plant. Eight sites free, no account.
Build my edge register