unified
UC-BCDR-02 — Establish and govern an ICT operational resilience framework
Establish a documented ICT risk management framework covering identification, protection, detection, response, recovery, and learning for critical ICT services, with a defined digital operational resilience strategy and risk tolerance. The management body approves the framework, assigns clear roles and responsibilities for ICT risk, allocates supporting budget, reviews the framework at least annually, and remains accountable for its effectiveness.
Record JSON · Open in map · Data retrieval guide
Catalog revision: 24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028. A connection does not establish full coverage.
Attributes
- domain
- Business Continuity & Disaster Recovery
- type
- preventive
- category
- administrative
Details
- unified_id
- UC-BCDR-02
- title
- Establish and govern an ICT operational resilience framework
- statement
- Establish a documented ICT risk management framework covering identification, protection, detection, response, recovery, and learning for critical ICT services, with a defined digital operational resilience strategy and risk tolerance. The management body approves the framework, assigns clear roles and responsibilities for ICT risk, allocates supporting budget, reviews the framework at least annually, and remains accountable for its effectiveness.
- domain
- Business Continuity & Disaster Recovery
- control_type
- preventive
- control_category
- administrative
- members
- framework
- dora
- control_id
- DORA-Ch2
- coverage
- partial
- delta
- detailed protection, backup, and recovery capabilities implemented via companion controls
- relationship
- intersects_with
- framework
- dora
- control_id
- DORA-Art5
- coverage
- full
- relationship
- superset_of
- guidance
Source
No record-specific source URL is provided.
Connections
- UC-BCDR-02 — Establish and govern an ICT operational resilience framework maps_to DORA-Art5 — Governance and organisation (management body responsibility)
- framework
- dora
- control_id
- DORA-Art5
- coverage
- full
- relationship
- superset_of
- delta
- Not provided
- source_version
- Regulation (EU) 2022/2554
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.
- UC-BCDR-02 — Establish and govern an ICT operational resilience framework mitigates Absent or untested business continuity / disaster recovery plan
- strength
- related
- rationale
- the framework requires a defined resilience/recovery strategy, driving plans to exist
- Risk & Resilience Framework Governance operates UC-BCDR-02 — Establish and govern an ICT operational resilience framework
- UC-BCDR-02 — Establish and govern an ICT operational resilience framework maps_to DORA-Ch2 — ICT risk management framework (Art 5-16)
- framework
- dora
- control_id
- DORA-Ch2
- coverage
- partial
- delta
- detailed protection, backup, and recovery capabilities implemented via companion controls
- relationship
- intersects_with
- source_version
- Regulation (EU) 2022/2554
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.