ICT risk-management framework and accountability
Certification and compliance
DORA
Coordinate ICT risks, suppliers and DORA testing
ISO:OK helps financial entities organise ownership, controls, incidents and relationships with ICT service providers in a single framework.
Overview
How ISO:OK supports DORA
ISO:OK organises evidence following the articles of the regulation: governance and ICT risk, incidents, resilience testing, third-party ICT providers. For each article you see the modules, printouts and documents that cover it.
The work builds on the same registers as ISO 27001: risks, assets, access, vulnerabilities, patches, backups and continuity. If you already have ISO 27001 in ISO:OK, you start from there.
The test programme sits with business continuity and the results of technical tests are uploaded among the documents. For suppliers you find a register and a questionnaire.
What you can manage
A structured path for DORA
Incident management, classification and reporting
Resilience testing and oversight of third-party ICT providers
The result
From requirements to verifiable evidence
Resilience activities are planned, assigned and linked to the evidence needed for internal controls and supervisory requests.
One platform, one source of truth
- Guided activities with ownership and deadlines
- Documents, records and evidence in the same environment
- Coverage map to identify gaps before the audit
- Shared information across multiple standards
Who it is for
Designed for companies and consultants
For financial entities, ICT providers and consultants involved in DORA implementation.
FAQ
Frequently asked questions
Can I reuse what I did for ISO 27001?
Yes: the registers are the same and ISO:OK links them to the DORA articles.
How does it help with ICT providers?
With the supplier register and questionnaire, which record the third-party risk assessment.
Where do I keep resilience tests?
The test programme sits with business continuity; the results of technical tests are uploaded among the documents.
Can consultants manage several client companies?
Yes. Consultants can work with several organisations while keeping users, roles, activities and documents separated.
Start managing DORA with ISO:OK
Explore a dedicated environment for free, with sample data already loaded. If you prefer, we will guide you with a presentation.