Agentpaket DORA

Vad är en agent? Agenter verkställer beslut.

12 agenter. Maskinform: /api/public/v1/agent-pack?act=dora. Texten i korten står på engelska, som i registret.

card:eu:article:dora--art-5

Gäller: financial-entity: The management body defines, approves and oversees the ICT risk management framework and bears ultimate responsibility for it.
Risk: high
Gör så här: The management body defines, approves and oversees the ICT risk management framework and bears ultimate responsibility for it.
Frist: Saknas i registret
Myndighet: Competent authority (Article 46) · Lead Overseer (ESA)
Hash: 7705c715ef87196509f369ee163c95d415770965b6b88e83d3dde09176e3eab4

card:eu:article:dora--art-6

Gäller: financial-entity: Maintain a sound, comprehensive and documented ICT risk management framework.
Risk: high
Gör så här: Maintain a sound, comprehensive and documented ICT risk management framework.
Frist: Saknas i registret
Myndighet: Competent authority (Article 46) · Lead Overseer (ESA)
Hash: d83d15bea023bfd8d837bb3d787c4b9d58118d68d0da01ff9ee1ba7089b8d01c

card:eu:article:dora--art-8

Gäller: financial-entity: Identify, classify and document all ICT-supported business functions, information assets and ICT assets, and review the classification at least yearly.
Risk: high
Gör så här: Identify, classify and document all ICT-supported business functions, information assets and ICT assets, and review the classification at least yearly.
Frist: Review at least yearly and on every major change in network or infrastructure.
Myndighet: Competent authority (Article 46) · Lead Overseer (ESA)
Hash: 5318d4076f74b9520a5e1e60ffa3e421565fbc43780b402c1849c68e28db7b5a

card:eu:article:dora--art-11

Gäller: financial-entity: Put in place an ICT business continuity policy with response and recovery plans.
Risk: high
Gör så här: Put in place an ICT business continuity policy with response and recovery plans.
Frist: Saknas i registret
Myndighet: Competent authority (Article 46) · Lead Overseer (ESA)
Hash: ff51f4a7f5f0ffc82729499bb78e8d8a427410e259cb4a627462206faf00d5ed

card:eu:article:dora--art-12

Gäller: financial-entity: Set and document backup, restoration and recovery policies, with backup systems physically and logically segregated from the source systems, and test them periodically.
Risk: high
Gör så här: Set and document backup, restoration and recovery policies, with backup systems physically and logically segregated from the source systems, and test them periodically.
Frist: Saknas i registret
Myndighet: Competent authority (Article 46) · Lead Overseer (ESA)
Hash: 6247279ada22a2d0616902a48edc32b9f6d3f038d629847c8acb4a597c52af2c

card:eu:article:dora--art-16

Gäller: financial-entity: Small and non-interconnected entities: put in place and maintain a sound and documented simplified ICT risk management framework.
Risk: high
Gör så här: Small and non-interconnected entities: put in place and maintain a sound and documented simplified ICT risk management framework.
Frist: Saknas i registret
Myndighet: Competent authority (Article 46) · Lead Overseer (ESA)
Hash: 60791500e97502ce10d8510e433b06356204546b49ed341cc733e70315089301

card:eu:article:dora--art-17

Gäller: financial-entity: Define and implement an ICT-related incident management process.
Risk: high
Gör så här: Define and implement an ICT-related incident management process.
Frist: Saknas i registret
Myndighet: Competent authority (Article 46) · Lead Overseer (ESA)
Hash: 4d56a1a4a56e11f77be3069a762a98c2ed1e77514ff83f33283361bf63172847

card:eu:article:dora--art-19

Gäller: financial-entity: Report major ICT-related incidents to the competent authority.
Risk: high
Gör så här: Report major ICT-related incidents to the competent authority.
Frist: Initial notification within 4 hours of classification and no later than 24 hours after awareness; intermediate report within 72 hours; final report within one month.
Myndighet: Competent authority (Article 46) · Lead Overseer (ESA)
Hash: fbed26089db422d7f1e8eff5974e008454212422b67dfaaaa80a3c86aae26daf

card:eu:article:dora--art-24

Gäller: financial-entity: Establish a digital operational resilience testing programme.
Risk: high
Gör så här: Establish a digital operational resilience testing programme.
Frist: Saknas i registret
Myndighet: Competent authority (Article 46) · Lead Overseer (ESA)
Hash: 750ea878a5f6f458b82e09206da3b89bdb4dbb233b1dcc2184148cab7a239e51

card:eu:article:dora--art-26

Gäller: financial-entity: Carry out threat-led penetration testing where identified by the competent authority.
Risk: high
Gör så här: Carry out threat-led penetration testing where identified by the competent authority.
Frist: Saknas i registret
Myndighet: Competent authority (Article 46) · Lead Overseer (ESA)
Hash: 5c5bf03513cef988a8031a0b380cade90c4d2f34a68fac2b583a7a38250bc8e7

card:eu:article:dora--art-28

Gäller: financial-entity: Manage ICT third-party risk and keep a register of information on all ICT service contracts.
Risk: high
Gör så här: Manage ICT third-party risk and keep a register of information on all ICT service contracts.
Frist: Saknas i registret
Myndighet: Competent authority (Article 46) · Lead Overseer (ESA)
Hash: 032d0386636c9e31d7038be263ffd8516257162923eb549c4afd21cdf0162d2d

card:eu:article:dora--art-30

Gäller: financial-entity: Include the key contractual provisions in contracts with ICT third-party service providers.
Risk: high
Gör så här: Include the key contractual provisions in contracts with ICT third-party service providers.
Frist: Saknas i registret
Myndighet: Competent authority (Article 46) · Lead Overseer (ESA)
Hash: 4a0e766ef02a38f289498b77eb7eb33ec553a5ee11b27e3b115a050ef362b7ad

Source: NovaCopilot. Inte juridisk rådgivning.