General requirements for digital operational resilience testing
Summary
Financial entities shall establish, maintain and review a digital operational resilience testing programme.
testingpenetration testingvulnerability assessmentresilience testing
Read the full official text: https://eur-lex.europa.eu/eli/reg/2022/2554/oj
← Article 34
Classification of major ICT-related incidents and significant cyber threats
Article 44 →
Threat-led penetration testing
Track DORA article 38 as evidence
eurocompliant maps this obligation to a checklist task and the evidence that satisfies it, alongside every other framework you follow.
Start free trial