DORA ICT Risk Management Framework
Under DORA, ICT risk management joins identification, protection, detection, response and recovery into one framework for a financial service, reviewed as technology and threats change over time.
Line 05: ICT risk management
The ICT risk management framework at the centre of DORA: identifying, protecting, detecting, responding and recovering, as one joined-up system.
The line guide
Working guides on this line
Detecting ICT Incidents Early
Detecting ICT incidents early under DORA means noticing signs of failure or attack while a service can still be contained, through monitoring fitted to the service and its risk picture.
ICT Asset Management
ICT asset management under DORA means knowing what technology a service depends on, who owns it, where it sits and how it is supported, so risk, protection and recovery can be aimed accurately.
ICT Risk and Change Management
ICT risk and change management under DORA means assessing technology change before it goes live, so a service improvement does not become a new source of disruption or exposure.
ICT Risk Appetite and Reporting
ICT risk appetite and reporting under DORA turn a service risk picture into clear tolerances and regular information for decision makers, so risk decisions are explicit and traceable.
ICT Risk for Cloud Systems
ICT risk for cloud systems under DORA concerns services that depend on shared, remotely operated platforms, where visibility, control and recovery are shaped by the supplier relationship.
ICT Risk Management Documentation
ICT risk management documentation under DORA records the framework for a service in a form that others can follow, test and review, without becoming a substitute for the framework itself.
ICT Risk Reviews and Assurance
ICT risk reviews and assurance under DORA test whether the framework describes the service accurately and works under disruption, through independent challenge and evidence, not repetition.
Identifying ICT Risk
Identifying ICT risk under DORA means mapping the systems, data and suppliers behind a service and naming the threats that could interrupt it, before protection or recovery is designed.
Legacy ICT Systems and Risk
Legacy ICT systems under DORA carry risk from age, weak support and poor documentation, and need a service-based plan for protection, recovery and eventual replacement.
Protecting ICT Systems
Protecting ICT systems under DORA means reducing the chance that a risk interrupts a service and limiting the damage when it does, through controls fitted to the service and its risk picture.
Responding to ICT Incidents
Responding to ICT incidents under DORA means containing harm, protecting customers and data, and making clear decisions while a service is disrupted, before recovery begins in earnest.
Restoring ICT Systems
Restoring ICT systems under DORA means returning a disrupted service to sound operation in a planned order, checking restored systems and data before live traffic returns to them.