SIEM, Compliance and Threat Detection Insights

1066 Matching Blogs

Showing 823-828 of 1066

138 / 178

Thursday, 25 September 2026

Compliance 8–12 min read min read

The 5 Pillars of DORA Explained

Regulation (EU) 2022/2554 organises digital operational resilience around five pillars — ICT risk management, incident reporting, resilience testing, third-party risk, and information sharing.

DORA ICT Risk Management Framework (Articles 5–16): Requirements

Thursday, 25 September 2026

Compliance 8–12 min read min read

DORA ICT Risk Management Framework (Articles 5–16): Requirements

Articles 5–16 of Regulation (EU) 2022/2554 set the ICT risk management framework — governance, identification, protection, detection, response and recovery, learning, and communication.

DORA Major ICT Incident Reporting: Classification, 4-Hour / 72-Hour / 1-Month Deadlines

Thursday, 25 September 2026

Compliance 10–14 min read min read

DORA Major ICT Incident Reporting: Classification, 4-Hour / 72-Hour / 1-Month Deadlines

Major ICT-related incident reporting under Regulation (EU) 2022/2554 Article 19 and Delegated Regulation (EU) 2025/301 Article 5 — initial within 4 hours of major classification (and no later than 24 hours from awareness), intermediate within 72 hours of the initial notification, final within one month after the intermediate.

DORA Register of Information: Template and How to Complete It

Thursday, 25 September 2026

Compliance 8–12 min read min read

DORA Register of Information: Template and How to Complete It

How financial entities approach the DORA Register of Information for ICT third-party arrangements — data themes, completion tips, and links to official ITS templates without inventing unofficial field lists.

DORA ICT Third-Party Risk: Contractual Requirements (Article 30) and Critical Providers

Thursday, 25 September 2026

Compliance 8–12 min read min read

DORA ICT Third-Party Risk: Contractual Requirements (Article 30) and Critical Providers

Article 30 of Regulation (EU) 2022/2554 sets contractual key principles for ICT services supporting critical or important functions — plus how critical ICT third-party oversight fits the wider Chapter V framework.

DORA Threat-Led Penetration Testing (TLPT): Who Must Do It and How TIBER-EU Applies

Thursday, 25 September 2026

Compliance 8–12 min read min read

DORA Threat-Led Penetration Testing (TLPT): Who Must Do It and How TIBER-EU Applies

Article 26 of Regulation (EU) 2022/2554 requires significant financial entities to carry out TLPT at least every three years — with TIBER-EU often referenced as methodology. No invented asset thresholds.

133 134 135 136 137 138 139 140 141 142

Blogs

The 5 Pillars of DORA Explained

DORA ICT Risk Management Framework (Articles 5–16): Requirements

DORA Major ICT Incident Reporting: Classification, 4-Hour / 72-Hour / 1-Month Deadlines

DORA Register of Information: Template and How to Complete It

DORA ICT Third-Party Risk: Contractual Requirements (Article 30) and Critical Providers

DORA Threat-Led Penetration Testing (TLPT): Who Must Do It and How TIBER-EU Applies

Featured expert guides