Analyse

• You have carried out a mapping of ICT-related risks.
• You have assessed the criticality of each information asset and system.
• You have identified the interdependencies between internal systems and external providers.
• You have assessed concentration risks linked to your ICT providers.
• You have carried out a gap analysis between your current setup and DORA's requirements.
• You have assessed the current maturity level of your ICT risk management.
• You have prioritised your corrective actions based on risk level.

← Previous phase: Identify