EU-DORA-15-01 Requirement 15 — Further harmonisation of ICT risk management tools, methods, processes and policies

Develop draft RTS for ICT security policies harmonisation

Description

The ESAs must, through the Joint Committee and in consultation with ENISA, develop common draft regulatory technical standards to specify further elements for ICT security policies, procedures, protocols and tools as referred to in Article 9(2), ensuring network security, safeguards against intrusions and data misuse, preserving data availability, authenticity, integrity and confidentiality including cryptographic techniques, and guaranteeing accurate and prompt data transmission.

Full Analysis & Evidence Requirements

Sign in to view the full obligation text, AI-generated applicability analysis, evidence checklists, and compliance mapping.

Sign In to View

Related Obligations

EU-DORA-15-02 Requirement

Develop draft RTS for access management rights controls

EU-DORA-15-03 Requirement

Develop draft RTS for anomalous activity detection mechanisms

EU-DORA-15-04 Requirement

Develop draft RTS for ICT business continuity policy components

EU-DORA-15-05 Requirement

Develop draft RTS for ICT business continuity plan testing

EU-DORA-15-06 Requirement

Develop draft RTS for ICT response and recovery plan components

EU-DORA-15-07 Requirement

Develop draft RTS for ICT risk management framework review report format

EU-DORA-15-08 Requirement

Consider proportionality factors when developing draft RTS

EU-DORA-15-09 Requirement

Submit draft RTS to Commission by deadline

EU-DORA-15-10 Requirement

Commission power to adopt regulatory technical standards

Map this obligation to your AI systems

ReguLume automatically maps regulatory obligations to your system inventory, identifies compliance gaps, and generates remediation plans.

Get Started

Start your compliance assessment

Map obligations to your AI systems, identify gaps, and generate board-ready reports. Plans start at $149/mo.

Get Started