Within eight weeks of the authority's notification under Article 12(7) the entity must give the TLPT authority, and its competent authority where different, remediation plans and the DORA Article 26(6) documentation. For each finding the plan must describe the shortcoming, the remediation measures with priority and expected completion (including improvements to identification, protection, detection and response), a root cause analysis, the staff or functions responsible, and the risks of not implementing and, where relevant, of implementing the measures.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.