DORA DORA-Art.25: Testing of ICT tools and systems

The testing programme shall include a range of assessments and tests (e.g. vulnerability assessments and scans, open-source analyses, network security assessments, gap analyses, physical security reviews, questionnaires, source-code reviews, scenario-based tests, compatibility/performance tests, end-to-end and penetration testing), with critical ICT systems tested at least yearly.

You are reading one control. How much of DORA have you already done?

DORA DORA-Art.25 is one control. If you already hold one of the frameworks below, a reviewed crosswalk already says how much of DORA your existing evidence covers. Hold NIS2 Directive and 17 of 26 DORA controls already carry evidence.

If you hold NIS2 Directive65.4% covered · 9 gaps If you hold Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.157.7% covered · 11 gaps If you hold ISO 27001:202253.8% covered · 12 gaps If you hold ISO 27002:202253.8% covered · 12 gaps If you hold NIST SP 800-53 Rev 553.8% covered · 12 gaps If you hold NIST Cybersecurity Framework 2.050% covered · 13 gaps

Each report names every control your existing framework evidences, every one it does not, the reasoning behind each claim, and the claims that were argued against and rejected. 0 were rejected on the NIS2 Directive pair alone.

See the released pairs, $299 each Browse the graph free

DORA DORA-Art.25: Testing of ICT tools and systems

Other controls in DORA Chapter IV: Digital Operational Resilience Testing

You are reading one control. How much of DORA have you already done?

Query this from an agent