Please answer these simple 10 questions.

This survey will help determine if your security and governance would improve with YouAttest.

Does your enterprise have a system to automate detection of identity risks, such as over-privileged accounts, to support ICT risk management? DORA Standard Article 6

Yes

ICT Risk Management Framework: Financial entities shall have a sound, comprehensive, and well-documented ICT risk management framework to identify, mitigate, and manage ICT risks.

Is there an assigned resource to oversee and implement the ICT risk management framework, including access control policies? DORA Standard Article 6(8)

Yes

Management Body Responsibilities: The management body shall define, approve, and oversee the ICT risk management framework, ensuring effective implementation.

Does your organization have policies and practices to allocate appropriate access to ICT systems supporting critical functions? DORA Standard Article 9

Yes

Access Control: Implement policies and procedures to ensure access to ICT systems is restricted to authorized users based on need, protecting critical functions.

Does your organization have a quantified access request/approval process for ICT systems handling sensitive data? DORA Standard Article 9

Yes

Access Control: Implement policies and procedures to ensure access to ICT systems is restricted to authorized users based on need, protecting critical functions.

Does your organization have procedures to classify and report major ICT-related incidents to competent authorities? DORA Standard Article 19

Yes

Incident Reporting: Financial entities shall classify and report major ICT-related incidents to competent authorities promptly, with standardized processes.

Does your enterprise have automated methods to review access controls for ICT systems involved in business continuity or disaster recovery? DORA Standard Article 11

Yes

Business Continuity: Maintain and test business continuity plans to ensure ICT systems support ongoing operations during disruptions.

Does your enterprise perform periodic evaluations of access controls for ICT systems supporting critical financial functions? DORA Standard Article 16

Yes

Operational Resilience Testing: Conduct regular testing of ICT systems, including access controls, to ensure resilience against disruptions.

Does your enterprise have the ability to review group/role-based access to ICT systems handling sensitive financial data? DORA Standard Article 9

Yes

Access Control: Implement policies and procedures to ensure access to ICT systems is restricted to authorized users based on need, protecting critical functions.

Does your organization ensure individual access to ICT systems is granted, reviewed, and revoked appropriately? DORA Standard Article 9

Yes

Access Control: Implement policies and procedures to ensure access to ICT systems is restricted to authorized users based on need, protecting critical functions.

Does your organization have an established method to generate compliance reports for DORA’s ICT third-party risk management requirements? DORA Standard Article 30

Yes

Third-Party Risk Management: Maintain a register of information on ICT third-party service providers and ensure contractual arrangements include access control and reporting obligations.

Full Name *

Email *

Phone *

Business *

GRC Partner Email(Optional)