EU-DORA-24-08
Requirement
24 — General requirements for the performance of digital operational resilience testing
Conduct yearly tests on critical and important function systems
Description
Financial entities (other than microenterprises) must ensure, at least yearly, that appropriate tests are conducted on all ICT systems and applications supporting critical or important functions.
Full Analysis & Evidence Requirements
Sign in to view the full obligation text, AI-generated applicability analysis, evidence checklists, and compliance mapping.
Sign In to ViewRelated Obligations
EU-DORA-24-01
Requirement
Establish comprehensive digital operational resilience testing programme
EU-DORA-24-02
Requirement
Include range of assessments and tools in testing programme
EU-DORA-24-03
Risk Management
Follow risk-based approach in testing programme conduct
EU-DORA-24-04
Requirement
Ensure tests are undertaken by independent parties
EU-DORA-24-05
Requirement
Dedicate sufficient resources and avoid conflicts of interest for internal testing
EU-DORA-24-06
Requirement
Establish procedures to prioritise, classify and remedy test issues
EU-DORA-24-07
Requirement
Establish internal validation methodologies for identified weaknesses
Map this obligation to your AI systems
ReguLume automatically maps regulatory obligations to your system inventory, identifies compliance gaps, and generates remediation plans.
Get Started