EU डिजिटल रेज़िलिएंस (DORA और NIS2) किट
DORA और NIS2 का पालन: ICT जोखिम फ़्रेमवर्क, तृतीय-पक्ष रजिस्टर, बड़ी घटना रिपोर्टिंग, CRA उत्पाद दायित्व और खतरा-आधारित परीक्षण।
5 चरणों में 11 टेम्पलेट, उपयोग के क्रम में। किसी भी टेम्पलेट को एडिटर में खोलें, भरें और PDF, DOCX या HTML में एक्सपोर्ट करें।
समस्या निर्धारण
NIS2 Cybersecurity Risk-Management Measures Template (Article 21)
पूर्णNIS2 classification, jurisdiction, management duties, measures (a) to (j) mapped to CIR 2024/2690, incident reporting, supply chain, metrics, transposition
Directive (EU) 2022/2555 (NIS2) Art. 20, 21, 23; Implementing Regulation (EU) 2024/2690; ENISA guidance v1.0 (June 2025)DORA ICT Risk Management Framework Template
पूर्णDORA ICT risk management framework: Article 5 governance, Article 6(8) strategy, risk tolerance, RTS 2024/1774 policy map, review report, traceability
DORA (EU) 2022/2554 Arts 5-16; Delegated Reg (EU) 2024/1774
सोर्सिंग
DORA Register of Information Template (ICT Third-Party Arrangements)
पूर्णDORA Art. 28(3) register: templates B_01.01 to B_99.01, arrangements, providers and LEI/EUID, supply chain ranks, functions, assessments, concentration, exit
Regulation (EU) 2022/2554 (DORA) Art. 28 to 30; Implementing Regulation (EU) 2024/2956Supplier Security Assessment Template
मानकSupplier tiering with review intervals, security posture checklist, secure development and SBOM questions, concentration and exit risk, NIS2, DORA, CRA, GDPR hooks, decision
ISO/IEC 27001:2022 A.5.19 to A.5.23; NIS2 Art. 21; DORA Art. 28 to 30; CRA Annex I
घटनाएँ
Incident Response Plan Template (NIST SP 800-61 Rev. 3)
पूर्णIR policy, CSF 2.0 mapping, roles, classification, containment, evidence and chain of custody, TLP 2.0, GDPR/NIS2/DORA/CRA notification clocks, metrics
NIST SP 800-61 Rev. 3; NIST CSF 2.0; ISO/IEC 27001:2022 A.5.24 to A.5.28; GDPR, NIS2, DORA, CRA Art. 14DORA Major Incident Report Template (Classification, Art. 19)
पूर्णDORA major ICT incident: classification thresholds, reporting clock, initial, intermediate and final report fields (ITS Annex I), client notice, cyber threats
DORA Art. 19; Delegated Reg. (EU) 2024/1772, 2025/301; Implementing Reg. (EU) 2025/302Security Incident Report Template (NIST SP 800-61 Rev. 3)
पूर्णIncident record and report: awareness, timeline, impact, evidence custody, ATT&CK analysis, actions, GDPR/NIS2/CRA/DORA/SEC clocks, CSF 2.0 lessons
NIST SP 800-61 Rev. 3 (2025); NIST CSF 2.0; GDPR Art. 33; NIS2 Art. 23; CRA Art. 14; DORA Art. 19
उत्पाद
CRA Technical Documentation and EU Declaration of Conformity Template
पूर्णEU CRA Annex VII file: product, design, Art. 13 risk assessment, Annex I checklist, support period, standards, tests, SBOM, Art. 32 module, Annex V DoC
Regulation (EU) 2024/2847 (Cyber Resilience Act) Annex I, V, VII; Art. 13, 32CRA Vulnerability Handling and Reporting Procedure Template
पूर्णEU CRA procedure: scope, RACI, Annex I Part II, SBOM, CVD, EPSS/SSVC prioritisation, Article 14 24h/72h/final reports via ENISA SRP, user notices, timeline
Regulation (EU) 2024/2847 (CRA) Art. 13-16, Annex I Part II; ENISA SRP
रिहर्सल और परीक्षण
Tabletop Exercise Template (CISA CTEP, HSEEP, NIST SP 800-84)
पूर्णDiscussion-based exercise pack: objectives and criteria, roles, ground rules, ransomware scenario with injects, questions, facilitator notes, AAR and Improvement Plan
CISA Tabletop Exercise Packages; FEMA HSEEP 2020; NIST SP 800-84Red Team Engagement Plan Template (TIBER-EU, DORA TLPT)
पूर्णThreat-led red team plan: CIF scope and flags, control team, scenarios, rules of engagement, risks, timeline, replay and purple teaming, remediation
TIBER-EU (Jan 2025); DORA Art. 26 and 27; Delegated Regulation (EU) 2025/1190