DORAVendorReady

DORA client questionnaire

Prepare baseline answers to provide to financial clients before their vendor review.

Exportable questionnaire

The questions cover service scope, controls, resilience, incidents, outsourcing and available evidence.

ClientScopeWhich ICT services are provided to the client and which components are critical?SecurityWhich controls protect access, data, logs and production environments?ResilienceWhich RTO/RPO targets are offered and when were they last tested?IncidentsWhich deadlines, channels and contacts are used to notify a major incident?OutsourcingWhich material subcontractors contribute to the service and where do they operate?EvidenceWhich evidence can be shared under NDA or through a client portal?