+Governance and Risk Management
---+Risk Asessments
------+Risk Assessment
------+Major change risk assessment
------+Legacy Systems risk assessment
---+(Internal) ICT Audit
------+Audit approach and frequency
------+Auditor requirements
------+Audit findings
------+Reliance Third-Party Assurance and Certifications
---+Management Responsibilities
------+Governance of ICT risk
------+Knowledge of the Management Body
------+Digital Operational Resilience Strategy
------+Business Continuity Oversight
------+Audit Plan Approval and Review
---+Risk Management Framework
------+Critical and Important Functions
------+Clear Segregation of Duties (SoD)
------+ICT Risk management framework
------+Annual Framework Review and Audit Process
------+Third-Party (Multi-vendor) Risk Management Program
------+Protection Measures

Governance and Risk Management

None

1. Overview

Risk Asessments None
(Internal) ICT Audit None
Management Responsibilities None
Risk Management Framework None

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

Requirements

3. Related Regulations

Regulations
  • NOREA -

    EN: DORA in Control Framework of NOREA, the Dutch professional association of IT auditors, https://www.norea.nl/. © NOREA. Reproduced with the permission of NOREA; converted into the GRCA format. Only the version published by NOREA is authoritative.

    DE: DORA in Control Framework von NOREA, dem niederländischen Berufsverband der IT-Auditoren, https://www.norea.nl/. © NOREA. Wiedergabe mit Genehmigung von NOREA; in das GRCA-Format umgewandelt. Maßgeblich ist allein die von NOREA veröffentlichte Fassung.