EU-DORA-13-08
Risk Management
13 — Learning and evolving
Incorporate Lessons into ICT Risk Assessment Process
Description
Full Analysis & Evidence Requirements
Sign in to view the full obligation text, AI-generated applicability analysis, evidence checklists, and compliance mapping.
Sign In to ViewRelated Obligations
EU-DORA-13-01
Requirement
Establish Threat Intelligence Capabilities
EU-DORA-13-02
Requirement
Conduct Post-Incident Reviews After Major ICT Incidents
EU-DORA-13-03
Reporting
Report Post-Incident Review Changes to Authorities
EU-DORA-13-04
Requirement
Evaluate Response Promptness in Post-Incident Reviews
EU-DORA-13-05
Requirement
Evaluate Forensic Analysis Quality in Post-Incident Reviews
EU-DORA-13-06
Requirement
Evaluate Internal Incident Escalation Effectiveness
EU-DORA-13-07
Requirement
Evaluate Communication Effectiveness in Post-Incident Reviews
EU-DORA-13-09
Risk Management
Review ICT Risk Management Framework Components
EU-DORA-13-10
Monitoring
Monitor Digital Operational Resilience Strategy Implementation
EU-DORA-13-11
Monitoring
Map ICT Risk Evolution Over Time
Map this obligation to your AI systems
ReguLume automatically maps regulatory obligations to your system inventory, identifies compliance gaps, and generates remediation plans.
Get Started