R-002Operational resilienceOpen
Inadequate ICT incident detection & reporting
Description
Delayed detection or misclassification of ICT incidents could breach DORA and NIS2 regulatory reporting deadlines across multiple jurisdictions.
Rating
INHERENT
HighRESIDUAL
Mediumvs last review