DORA documentation kit – Language: English

Description

Documentation Kit DORA – Digital Operational Resilience Act provides the basic documentation to implement the document system required by this European regulation.
_ 29 procedures and policies in MS Word format.
_ 2 registers.
_ ICT Operational Resilience Strategy example.
_ DORA document system implementation check list – Extract_DORA implementation checklist.
_ Supplier/third party information security management check list (Excel format, 30 points supplier information security assessment).
_ Correlation Table Dora Policies/Procedures and ISO 27001:2022 Controls EXTRACT_CORRELATION_DORA_ISO27001.
_ Excel KPI x DORA ACT application – contains 9 KPIs (with user guide) to correctly apply and manage the DORA Regulation –
_ Documentation Verification Checklist required by DORA ACT
_ 3 Tools in MS Excel to perform GAP ANALYSIS concerning all articles of the 3 Delegated Regulations 1772, 1773, 1774published on 22/6/24 in the Official Journal of the European Union:
1)Tools MS Excel Reg. Del. 1772: 28 checkpoints
2)Tools MS Excel Reg. Del. 1773: 68 control points
3)Tools MS Excel Reg. Del. 1774: 282 control points

_ The software RA 27001 – Asset Risk Analysis Software according to ISO 27001.

Language: English

The software RA 27001 – Asset Risk Analysis Software according to ISO 27001 (trade value EUR 397 i.e.)is also provided free of charge, to be used as support for carrying out the risk analysis required by the NIS2 Directive

Software functions
_ creation of asset inventory.
_ risk analysis and automatic calculation of the risk level of each threat for each asset.
_ calculation of the impact level of the risks on the assets analysed.
_ export in pdf and print the following reports:
1) Risk assessment report
2) Report of unacceptable risk treatment plan
3) Impact assessment report
Minimum requirements
Windows 7, 8, 10 and higher
Licence for 1 pc
Support and updates not included

Also available in:
_ Italian – www.edirama.org
_ French – www.ediramafrance.com
_ Spanish – www.edirama.it

***********************************************

DORA documentation kit is based on the ‘Regulatory Technical Standards to further harmonise ITC risk management tools, methods, processes and policies as mandated under Articles 15 and 16(3) of Regulation (EU) 2022/2554’ in which the policies and procedures under Title II of DORA are set out.

Contents Procedures and Policies, Registers, DORA Implementation Checklist

Proc_1_Art_9_RTS_Capacity and Performance Management Procedure.docx
Proc_2_Art_11_RTS_Systems and Data Security Procedure.docx
Proc_3_Art_17_RTS_ICT Change Management Procedure.docx
Proc_4_Art_16_RTS_Acquisition Procedure.docx
Proc_5_Art_14_RTS_Procedure for Data Transmission Security.docx
Proc_6_Art_13_RTS_Procedure for ICT Network Security Management.docx
Proc_7_Art_22_23_RTS_ Information Security Incident Response Procedure.docx
Proc_8_Art_22_23_RTS_ITC Continuity Incident Response Procedure.docx
Proc_9_Art. 18_RTS_Physical and Environmental Security Procedure.docx
Proc_10_Art.10_RTS_Procedure Technical Vulnerability Assessment.docx
Proc_11_Art_23_Procedure for the Timely Detection of Anomalous Activities in ICT Systems.docx
Proc_12_Art_24_25_26_Procedura_DORA_Testing.docx

Policies
Policy_Art_12_RTS_Management_Log.docx
Policy_Art_15_RTS_Project Management.docx
Policy_Art_18_RTS_Physical and Environmental Security Policy.docx
Policy_Art_19_RTS_Human Resources.docx
Policy_Art_21_RTS_Access Control .docx
Policy_Art_22_23_RTS_ Significant Incidents and Evidence Collection Policy.docx
Policy_Art_24_25_26_RTS_Business Continuity Policy.docx
Policy_Art_28_Management of third-party ICT service providers .docx
Policy_Art_3_RTS_ Risk Management Policy.docx
Policy_Art_4_5_RTS_Asset Management Policy .docx
Policy_Art_6_7_RTS_Cryptographic Control Policy.docx
Policy_Art_6_7_RTS_Cryptographic Key Management Policy.docx

Register
Significant Information Incidents and Threats Register.xlsx
Register of Contractual Agreements for the Use of ICT Services provided by Third Party Providers .xlsx

Check list
DORA implementation check list  Extract_DORA implementation checklist
Documentation Verification Checklist required by DORA ACT

ICT Operational Resilience Strategy
Example ICT Operational Resilience Strategy art 7 DORA ACT

See two complete examples
1) Policy_Art_3_RTS_ Risk Management Policy
2) Policy_Art_4_5_RTS_Asset_ Management Policy

Being a generic model, it requires customisation of the contents to adapt it to the realities where it is applied, with the support of lawyers and ICT technicians.
Immediate download after payment by credit card.

Key Features

• Instant Download: After payment, all documents are available for immediate download, allowing you to start using them immediately.
• Easy to Use: The documents are designed to be intuitive and easy to use, even for those without extensive legal or technical training.
• Fully Customisable: All files can be customised to reflect the company’s specific policies, procedures and organisational structure.
• Regulatory Compliance: Procedures and Policies have been created following the contents of the Regulatory Technical Standards to further harmonise ITC risk management tools, methods, processes and policies as mandated under Articles 15 and 16(3) of Regulation (EU) 2022/2554’ in which the policies and procedures set out in Title II of DORA are outlined.

Benefits of Purchase

• Complete Upgrade: Get everything you need to implement the DORA document system completely and effectively.
• Time Savings: Reduce the time needed to research and draft documents, thanks to pre-filled and structured templates.
• Compliance: Policies and procedures are implemented taking into account the DORA – Digital Operational Resilience Act and ISO 27001 information security management systems
• Refund voucher – No risk, if you are not satisfied you can request a refund voucher to be used on www.edirama.eu for other products of your interest