ContentsIT operationsStronger operational stabilityKey differences vs. BAIT/VAITMandatory criteria under Art. 7 DORACapacity management (Art. 7(c) DORA + Art. 9 RTS RMF)Legacy systems – obligatory annual risk analysisClassification of ICT systems and informationMandatory identification & classification (Art. 8(1) DORA + Art. 4 RTS RMF)Expansion to include all changes to ICT systemsKey shiftImplicationsAdditional RTS requirementsSegregated data retention & reconciliation of backupsa) Backup policy obligationsb) Physical and logical segregation of backup systemsc) Expanded restoration requirementsd) Mandatory multiple checks and reconciliationse) Mandatory testing of restoration proceduresf) Error reporting IT operations Stronger operational stability Reference: page 14 DORA’s Article 7 significantly raises expectations for updated, reliable, and technologically resilient ICT … Continue reading IT operationsRead More →