DORA Readiness Scorecard

ICT risk-management framework in place (Art. 6)Yes

Incident classification + major-incident reporting to the authority (Art. 17-19)Yes

Digital operational resilience testing programme (TLPT where designated, Art. 24-26)Yes

Register of ICT third-party arrangements + exit strategies (Art. 28)Yes

Cyber threat information-sharing arrangements (Art. 45)Yes

Business continuity, backup & restoration with defined RTO/RPO (Art. 11-12)Yes

Up-to-date inventory of ICT assets and dependencies (Art. 8)Yes

Patch and vulnerability management processYes

Digital operational resilience training for staff and management (Art. 13)Yes

Management body defines, approves and oversees the risk framework (Art. 5)Yes