DORA Compliance Overview

Meridian Financial Group - Compliance program, KPIs and risk indicators

Compliance by Area

On Track

Risk Summary

Recent Activity

CIF Process - Critical/Important Functions

Identification, mapping and governance of critical functions per DORA Art. 3(1)(22)

DORA Art. 3(22), 6, 8, 11

ICT Service & System Inventory

Inventory, classification and risk assessment of all ICT assets per DORA Art. 5–8

DORA Art. 8, 11, 28

Function Mapping

Third-Party ICT Providers

Risk assessment and oversight of third-party providers per DORA Ch. V

DORA Art. 28, 30

ICT Risk Matrix

Risk assessment and mapping per DORA Art. 6 - probability × impact

DORA Art. 5–6

DORA Timeline

Key milestones and deadlines for the compliance program

Incident Management

Classification, response and reporting per DORA Ch. III

DORA Art. 17–23

Board Decisions & Approvals

Board-level oversight and approval of DORA governance documents per Art. 5(2)

DORA Art. 5(2)

Approval Requirements

Decision Log

Art. 5(2)(f)

Upcoming Reviews

DORA Document Library

All governance documents, policies and procedures - organized by category

Documentation Overview

DORA Compliance Checklist

Requirements by chapter - check off as you meet them, progress shown in real time

Compliance Action Tracker

Track remediation items across DORA chapters - connect your tools for two-way sync

Distribution by DORA Chapter

Remediation Progress

Burndown