EU-DORA-24-03
Risk Management
24 — General requirements for the performance of digital operational resilience testing
Follow risk-based approach in testing programme conduct
Description
When conducting the digital operational resilience testing programme, financial entities (other than microenterprises) must follow a risk-based approach taking into account the criteria set out in...
Full Analysis & Evidence Requirements
Sign in to view the full obligation text, AI-generated applicability analysis, evidence checklists, and compliance mapping.
Sign In to ViewRelated Obligations
EU-DORA-24-01
Requirement
Establish comprehensive digital operational resilience testing programme
EU-DORA-24-02
Requirement
Include range of assessments and tools in testing programme
EU-DORA-24-04
Requirement
Ensure tests are undertaken by independent parties
EU-DORA-24-05
Requirement
Dedicate sufficient resources and avoid conflicts of interest for internal testing
EU-DORA-24-06
Requirement
Establish procedures to prioritise, classify and remedy test issues
EU-DORA-24-07
Requirement
Establish internal validation methodologies for identified weaknesses
EU-DORA-24-08
Requirement
Conduct yearly tests on critical and important function systems
Map this obligation to your AI systems
ReguLume automatically maps regulatory obligations to your system inventory, identifies compliance gaps, and generates remediation plans.
Get Started