EU-DORA-24-02
Requirement
24 — General requirements for the performance of digital operational resilience testing
Include range of assessments and tools in testing programme
Description
The digital operational resilience testing programme must include a range of assessments, tests, methodologies, practices and tools to be applied in accordance with Articles 25 and 26.
Full Analysis & Evidence Requirements
Sign in to view the full obligation text, AI-generated applicability analysis, evidence checklists, and compliance mapping.
Sign In to ViewRelated Obligations
EU-DORA-24-01
Requirement
Establish comprehensive digital operational resilience testing programme
EU-DORA-24-03
Risk Management
Follow risk-based approach in testing programme conduct
EU-DORA-24-04
Requirement
Ensure tests are undertaken by independent parties
EU-DORA-24-05
Requirement
Dedicate sufficient resources and avoid conflicts of interest for internal testing
EU-DORA-24-06
Requirement
Establish procedures to prioritise, classify and remedy test issues
EU-DORA-24-07
Requirement
Establish internal validation methodologies for identified weaknesses
EU-DORA-24-08
Requirement
Conduct yearly tests on critical and important function systems
Map this obligation to your AI systems
ReguLume automatically maps regulatory obligations to your system inventory, identifies compliance gaps, and generates remediation plans.
Get Started