What does DORA require for ICT risk management? | DORA

Financial entities must have a sound, comprehensive and documented ICT risk management framework, reviewed at least once a year and after major incidents.

More from ExploreWorldAI

• Ask a legal question about GDPR, contracts or rules
• Common questions with answer and source | NovaCopilot AI
• Subject access request: getting your personal data | NovaCopilot AI
• Right to erasure: when data must be deleted | NovaCopilot AI
• Data breach: the 72 hour reporting deadline | NovaCopilot AI
• Prohibited AI practices under AI Act Article 5 | NovaCopilot AI
• Right of withdrawal in distance sales: 14 days | NovaCopilot AI
• Complaining about goods: three years and the two month rule | NovaCopilot AI
• Who does the AI Act apply to? | AI Act
• When does the AI Act apply? | AI Act
• Is my company a provider or a deployer of AI? | AI Act
• Which AI systems count as high-risk? | AI Act
• What requirements apply to a high-risk system? | AI Act
• What must a company using high-risk AI do? | AI Act
• Does a chatbot have to say that it is AI? | AI Act
• Do AI-generated images and deepfakes have to be labelled? | AI Act
• What does the AI literacy requirement mean? | AI Act
• How high are the fines under the AI Act? | AI Act
• What rules apply to AI models such as ChatGPT and Gemini? | AI Act
• When does an AI model have systemic risk? | AI Act
• Does the AI Act apply to companies outside the EU? | AI Act
• Does an AI system need CE marking? | AI Act
• May AI read emotions at work or in school? | AI Act
• Who must carry out a fundamental rights impact assessment? | AI Act

ExploreWorldAI is operated by Valkiv Ventures AB (Reg. no. 556995-1311), Kungsgatan 8, 111 43 Stockholm, Sweden. EU-hosted, with data processing assessed against the GDPR. Contact: hello@exploreworldai.com.

Machine-readable summaries for AI agents: /llms.txt and /llms-full.txt.