Krav
Annual review of the ICT risk framework
Annual review of the ICT risk framework
- provision
- Art. 6(5)
- roles
- financial-entity
- text
- The ICT risk management framework shall be documented and reviewed at least once a year, or periodically in the case of microenterprises, as well as upon the occurrence of major ICT-related incidents, and following supervisory instructions or conclusions derived from relevant digital operational resilience testing or audit processes.
- verbatim
- true
- Id:
- requirement:eu:dora:art-6-5
- Version:
- 1 (graf 2026-10-10.1)
- Hash:
- 12f071fe536ab1436f13725e8d1af836524afe2957cb7b529ed5d4f3f89b542d
- Källa:
- Art. 6(5), läst 2026-10-10
Kopplingar och beslutsvägar finns i NovaCopilot med partnernyckel. Source: NovaCopilot.