EU-DORA-25-03
Requirement
25 — Testing of ICT tools and systems
Apply risk-based approach to ICT testing - microenterprises
Description
Perform the tests specified in paragraph 1 by combining a risk-based approach with strategic planning of ICT testing, considering the balance between scale of resources and time allocated to testing versus urgency, type of risk, criticality of information assets and services, and other relevant factors including the entity's ability to take calculated risks.
Full Analysis & Evidence Requirements
Sign in to view the full obligation text, AI-generated applicability analysis, evidence checklists, and compliance mapping.
Sign In to ViewRelated Obligations
Map this obligation to your AI systems
ReguLume automatically maps regulatory obligations to your system inventory, identifies compliance gaps, and generates remediation plans.
Get Started