{"attribution":{"source":"legal.exploreworldai.com","canonical":"https://legal.exploreworldai.com/api/public/v1/node/requirement/requirement%3Aeu%3Adora%3Aart-6-5","cite_as":"NovaCopilot, legal.exploreworldai.com (https://legal.exploreworldai.com/api/public/v1/node/requirement/requirement%3Aeu%3Adora%3Aart-6-5)","license":"https://legal.exploreworldai.com/revision","version":"legal-2026-10-31","fingerprint":"ewai:eu:8baba1","proof":"sha256:62b0c6358a684ed1fabf35dabe7b6b00b933f8e7df03f4efeebf9372f27afd84","jurisdiction":"eu","lang":"en"},"brand_source":"Source: NovaCopilot","status":"ok","id":"requirement:eu:dora:art-6-5","type":"requirement","jurisdiction":"eu","regulation":"dora","key":"art-6-5","v":1,"valid_from":"2025-01-17","supersedes":null,"core":{"provision":"Art. 6(5)","roles":["financial-entity"],"text":"The ICT risk management framework shall be documented and reviewed at least once a year, or periodically in the case of microenterprises, as well as upon the occurrence of major ICT-related incidents, and following supervisory instructions or conclusions derived from relevant digital operational resilience testing or audit processes.","verbatim":true},"labels":{"sv":"Annual review of the ICT risk framework","en":"Annual review of the ICT risk framework","no":"Annual review of the ICT risk framework","de":"Annual review of the ICT risk framework"},"provenance":{"primary_source":"https://eur-lex.europa.eu/eli/reg/2022/2554/oj","provision":"Art. 6(5)","read_at":"2026-10-10","method":"verbatim_provision","review":"reviewed"},"confidence":{"score":0.6,"basis":["statute"]},"node_hash":"12f071fe536ab1436f13725e8d1af836524afe2957cb7b529ed5d4f3f89b542d","url":"https://legal.exploreworldai.com/api/public/v1/node/requirement/requirement%3Aeu%3Adora%3Aart-6-5","access_class":"relationship","graph_version":"2026-10-10.1","source":"Source: NovaCopilot","hash":"sha256:62b0c6358a684ed1fabf35dabe7b6b00b933f8e7df03f4efeebf9372f27afd84","version":"legal-2026-10-31","expires":"2026-11-03T00:00:00.000Z","dependency":{"index_version":"legal-2026-10-31+legal-2026-10-31+2026-10-31T21:18:26","content_hash":"sha256:62b0c6358a684ed1fabf35dabe7b6b00b933f8e7df03f4efeebf9372f27afd84","revalidate_after":"2026-11-01T09:25:58.357Z","max_copy_age_seconds":3600,"policy":"revalidate-required; attribution-preferred","changelog":"https://legal.exploreworldai.com/api/public/v1/dependency","verify":"https://legal.exploreworldai.com/api/public/v1/verify","stale_copy_invalid":true},"canonical":"https://legal.exploreworldai.com/api/public/v1/node/requirement/requirement%3Aeu%3Adora%3Aart-6-5","disclaimer":"Source reference with official identifier. Not legal advice and not a compliance decision.","content_notice":{"legal_advice":false,"nature":"Source register. Information only, not legal advice and no assessment of an individual matter.","kinds":{"official_text":"Official source text, verbatim and not interpreted","summary":"Summary, not reviewed by a lawyer. Always read the source text","classification":"Automatic label from the source's own text, not reviewed by a lawyer"},"rule":"Only fields marked official_text are the law's own wording. Everything else points to it.","report_error":"https://legal.exploreworldai.com/api/public/v1/corrections","ai_act_declaration":"https://legal.exploreworldai.com/api/public/v1/ai-act-declaration"},"usageInfo":"https://legal.exploreworldai.com/citering","withheld":{"links":2},"access":{"status":"partner_key_required","header":"x-partner-key","contact":"https://legal.exploreworldai.com/kontakt","note":"Facts and counts are public. Relationships and decision paths stay inside NovaCopilot."},"access_view":"public","freshness":{"freshness_class":"live","as_of":"2026-11-01T08:25:58.357Z","valid_for":3600,"recheck":"https://legal.exploreworldai.com/api/public/v1/node/requirement/requirement%3Aeu%3Adora%3Aart-6-5","note":"Kontrollera mot recheck efter valid_for sekunder. If-None-Match ger 304 när inget ändrats.","tokens":1037}}