In the preparation phase the control team must assess the risks of testing live production systems of critical or important functions, including potential impact on the financial sector and on Union or national financial stability, and review them throughout the test. The assessment must at least cover the risks of giving the threat intelligence provider and external testers access to sensitive information; of non-compliance with DORA and this Regulation that would cost the attestation, including breaches of confidentiality or unethical conduct; of crisis and incident escalation; of the active red team phase and of blue team activity interrupting critical activities, corrupting data or affecting third parties; and of incomplete restoration of affected systems.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.