Undertakings must take reasonable measures so that their activities run continuously and regularly, with contingency plans and proportionate systems, resources and procedures, and must establish and operate their ICT (network and information) systems under Regulation (EU) 2022/2554 (DORA), a cross-reference in force since 17 January 2025. The Delegated Regulation requires a business continuity policy preserving essential data and functions or ensuring their timely recovery.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.