ICT business continuity management Revised structure and contents of policies and plans DORA introduces a new, layered ICT BCM architecture. a) New central element: ICT business continuity policy Content of the ICT BCM policy (Art. 11(2) DORA; Art. 24 RTS RMF): b) ICT business continuity plans (vs. BAIT/VAIT BC plans) c) ICT response and recovery plans (new naming, similar purpose) d) BIA, RTO/RPO and market-wide perspective Expansion of mandatory scenarios DORA significantly broadens the mandatory scenario set for ICT response and recovery plans. Art. 26(2) RTS RMF and cross-references to Art. 24(1)(b)(i)(1) and Art. 25(2)(e) RTS RMF require that the following (non-exhaustive) scenarios be covered … Continue reading ICT business continuity managementRead More →