EU-DORA-11-02
Documentation
11 — Response and recovery
Implement ICT business continuity policy through documented arrangements
Description
Full Analysis & Evidence Requirements
Sign in to view the full obligation text, AI-generated applicability analysis, evidence checklists, and compliance mapping.
Sign In to ViewRelated Obligations
EU-DORA-11-01
Requirement
Establish comprehensive ICT business continuity policy
EU-DORA-11-03
Requirement
Ensure continuity of critical or important functions
EU-DORA-11-04
Requirement
Establish ICT incident response and resolution procedures
EU-DORA-11-05
Requirement
Activate dedicated incident containment plans
EU-DORA-11-06
Requirement
Estimate preliminary impacts, damages and losses
EU-DORA-11-07
Requirement
Establish communication and crisis management actions
EU-DORA-11-08
Requirement
Implement ICT response and recovery plans
EU-DORA-11-09
Requirement
Subject ICT response and recovery plans to independent internal audit
EU-DORA-11-10
Requirement
Maintain and test ICT business continuity plans
EU-DORA-11-11
Requirement
Conduct business impact analysis (BIA)
Map this obligation to your AI systems
ReguLume automatically maps regulatory obligations to your system inventory, identifies compliance gaps, and generates remediation plans.
Get Started