Checks / DORA
DORA
DORA compliance checks
The EU Digital Operational Resilience Act for banks, insurers and their technology suppliers.
18 controls, each a live check with a tamper-evident receipt. Run the whole framework at once from any AI assistant with sebbi_run_framework and framework=dora.
- DORA Art.5 - ICT risk management framework
- DORA Art.6 - ICT governance responsibility
- DORA Art.8 - ICT asset inventory
- DORA Art.9 - protection & prevention controls
- DORA Art.10 - anomaly detection in place
- DORA Art.11 - response & recovery plan
- DORA Art.11 - RTO objective set
- DORA Art.12 - backup policy recorded
- DORA Art.13 - learning & evolving process
- DORA Art.14 - crisis communication plan
- DORA Art.17 - incident management process
- DORA Art.19 - major incident reporting path
- DORA Art.24 - digital resilience testing
- DORA Art.25 - vulnerability assessments
- DORA Art.28 - third-party ICT risk register
- DORA Art.28 - concentration risk assessed
- DORA Art.30 - key contractual provisions
- DORA Art.45 - threat intelligence sharing