DORA (EU 2022/2554)
Digital Operational Resilience Act controls mapped to concrete platform artefacts — access, continuity testing, and incident records.
What this is, and is not
Using Break Glass Business does not make you DORA (EU 2022/2554)-certified — that is an assessment of your whole organisation. For the specific controls below, the records this product generates are the kind of evidence an assessor asks you to produce.
| Control | Title | Evidence in the pack |
|---|---|---|
| Art. 11 | Response and recovery | playbooks, recoveryPlans, runs |
| Art. 17 | ICT-related incident management process | incidents, runs |
| Art. 24-26 | Digital operational resilience testing | drills, tabletops |
Every evidence pack carries this mapping. See the full trust and control overview or the security questionnaire.