DORA RTS on ICT Risk Management Framework (Commission Delegated Regulation (EU) 2024/1774) 30: Article 30: Classification of information assets and ICT assets (simplified framework)

Entities under Article 16(1) must identify, classify and document all critical or important functions, the information and ICT assets supporting them and their interdependencies, review that classification as needed, and identify all critical or important functions supported by ICT third-party providers.