EU-DORA-11-06 Requirement 11 — Response and recovery

Estimate preliminary impacts, damages and losses

Description

Financial entities must implement arrangements to estimate preliminary impacts, damages and losses from ICT-related incidents.

Sign in to view the full obligation text, AI-generated applicability analysis, evidence checklists, and compliance mapping.

Establish comprehensive ICT business continuity policy

Implement ICT business continuity policy through documented arrangements

Ensure continuity of critical or important functions

Establish ICT incident response and resolution procedures

Activate dedicated incident containment plans

Establish communication and crisis management actions

Implement ICT response and recovery plans

Subject ICT response and recovery plans to independent internal audit

Maintain and test ICT business continuity plans

Conduct business impact analysis (BIA)

ReguLume automatically maps regulatory obligations to your system inventory, identifies compliance gaps, and generates remediation plans.

Get Started