DORA Compliance
ICT third-party records, incidents and resilience testing.
Maintain information about ICT third parties and DORA-related incident records. Record resilience tests and follow review steps without treating the workspace as a regulatory filing service.
What you can do
Build and review the information register
Build register entries from the vendor register, review and edit provider and service details, and export the available register extract.
Record incident classifications and reporting stages
Enter classification inputs, save an incident record and review its calculated reporting deadlines. Record when each reporting stage has been filed.
Maintain resilience-test records
Record vulnerability, scenario, stress, penetration or TLPT tests. Review the available tester-independence checks and promote eligible gaps to findings.
Who uses it
- ICT risk and compliance teams
- Third-party and resilience-test owners
Things to know
- Vendor-based register building requires vendor edit access. Readiness covers only assessed chapters. Classification and deadlines depend on recorded inputs; exports and filed markers do not submit a report or prove regulatory acceptance. Tester review duties depend on organisation configuration. AI narratives are optional and configuration-dependent.