ICT Risk Management
Governance, risk identification, protection needs, controls, monitoring, and evidence.
Mehr erfahrenDORA Implementation
Operationalizing the Digital Operational Resilience Act.
This DORA section translates publicly available BaFin information and DORA structures into actionable target states, measures, evidence, and review logic for financial institutions.
common.disclaimer_label common.disclaimer_index
Management-Zusammenfassung
- DORA schafft EU-weite Standards für digitale operationale Resilienz im Finanzsektor.
- Sechs Umsetzungsfelder bilden den Kern: IKT-Risikomanagement, Vorfälle, Resilienztests, Drittparteien, Informationsregister und kwF.
- Plattform bietet umsetzungsorientierte Sollzustände, Maßnahmenkatalog, Nachweise und Review-Logik.
- Alle Inhalte sind mit ISO 27001:2022 und MaRisk abgestimmt für integrierte Compliance.
Neu
Quick-Start Guide
DORA Quick-Start: In 30 Tagen konform starten
Praktischer Einstieg für Compliance-Offiziere und Risikomanager: 30-Tage-Roadmap, Selbstbewertung, 5 Quick Wins und FAQ.
ICT-Related Incidents
Handling, classification, reporting, escalation, and lessons learned.
Mehr erfahrenResilience Testing & TLPT
Structured integration of risk-based test programmes and Threat-Led Penetration Testing.
Mehr erfahrenResilience Testing Workbench
DORA Art. 24/25 Testing Programme — Manage test cases, document findings, maintain evidence.
Mehr erfahrenICT Third-Party Risk
Make contracts, service chains, exit, concentration risks and audit rights actionable.
Mehr erfahrenInformation Register
Structure registration obligations, data quality, filing, and professional responsibilities.
Mehr erfahrenCritical or Important Functions
Methodology for determining CIF with outage and regulatory violation scenarios.
Mehr erfahrenRegulated Activities
Activity inventory, EBA identifiers, and linkage to CIF and information register.
Mehr erfahrenICT Contracts
Contract classification, minimum content, exit, subcontractors, and audit rights.
Mehr erfahrenICT Policies
Policy inventory, document control, approval, and review triggers.
Mehr erfahrenDocumentation Requirements
Consolidate verification obligations, documentation logic, and auditable artefacts in a single overview.
Mehr erfahrenDORA Timeline
Key milestones and deadlines from 2024 to 2028: entry into force, reporting obligations, TLPT, and further key dates.
Mehr erfahrenDORA Glossary
Over 25 regulatory terms explained: CIF, CTPP, T2S, MVP, and further technical terms with cross-references.
Mehr erfahren