Exportable Documents in DORAedge

These are the documents, at current, you can export out of DORAedge

Register of Information in EBA Template DORAedge will provide customers with the ability to export a register of all contractual arrangements related to ICT services, formatted according to the European Banking Authority (EBA) template. This register contains comprehensive details on ICT third-party service providers, with information required for regulatory reporting and auditing purposes. The format adheres to the EBA’s regulatory standards, making it compliant and easy to submit to competent authorities as part of ongoing supervision requirements.

Register of Information in Dutch Standards For customers in the Netherlands, DORAedge will allow the export of a register of information that complies with Dutch-specific ICT third-party risk management standards. This version follows the local Dutch regulations and guidelines, ensuring that financial entities meet the regulatory expectations set by the Dutch competent authorities. This ensures entities can easily maintain and submit information on ICT service providers in line with national standards.

Article 6.5 Documentation Pack The Article 6.5 documentation pack allows customers to export a collection of documents that demonstrate compliance with Article 6.5 of DORA, which requires entities to have a sound ICT risk management framework. This pack includes policies, strategies, and governance structures related to ICT risk management, enabling customers to present a comprehensive set of documents for both internal auditing and regulatory inspection purposes.

Business Impact Analysis Starter Pack (Article 11.5) The Business Impact Analysis (BIA) Starter Pack provides a structured framework for financial entities to analyze the potential impact of disruptions on their critical or important functions, as mandated by Article 11.5 of DORA. This exportable pack includes templates, guidelines, and examples that help customers identify risks, assess the impact of disruptions, and plan for ICT-related incident recovery. It is designed to give customers a jump-start on conducting and documenting their BIAs in line with regulatory expectations.