Regulatory compliance — DORA, NIS2, ISO
Risk, incidents and suppliers
Risk analysis and treatment, incidents from service management, third-party risk and corrective actions.
What does it solve?
BEFORE
- Risk analysis is done once a year, in Excel.
- Incidents and risks are separate worlds.
- Supplier risk is not visible.
AFTER
- A live risk register, with owners.
- An incident updates the related risk.
- Third-party assessment, with contract and SLA.
How does it work?
-
Identification
Risks for assets, processes and suppliers.
-
Evaluation
Likelihood and impact, maturity level.
-
Treatment
Action plan, owner, deadline.
-
Review
Reassessment based on incidents or changes.
Capabilities
-
Risk register
At asset, process and supplier level.
-
Incident integration
From service management.
-
Supplier risk
Third-party scope under DORA.
-
CAPA
Tracking corrective actions.
Tudja már, min változtatna?
Senior tanácsadóink 24 órán belül felveszik Önnel a kapcsolatot.
Kérjen demót