EU-DORA-11-03 Requirement 11 — Response and recovery

Ensure continuity of critical or important functions

Description

Financial entities must implement arrangements that ensure the continuity of the financial entity's critical or important functions.

Sign in to view the full obligation text, AI-generated applicability analysis, evidence checklists, and compliance mapping.

Establish comprehensive ICT business continuity policy

Implement ICT business continuity policy through documented arrangements

Establish ICT incident response and resolution procedures

Activate dedicated incident containment plans

Estimate preliminary impacts, damages and losses

Establish communication and crisis management actions

Implement ICT response and recovery plans

Subject ICT response and recovery plans to independent internal audit

Maintain and test ICT business continuity plans

Conduct business impact analysis (BIA)

ReguLume automatically maps regulatory obligations to your system inventory, identifies compliance gaps, and generates remediation plans.

Get Started