Skip to main content
CMDashCybersecurity Maturity Dashboard

Art.17(2) Early warning indicators

DORA · 2022/2554

2. Financial entities shall record all ICT-related incidents and significant cyber threats. Financial entities shall establish appropriate procedures and processes to ensure a consistent and integrated monitoring, handling and follow-up of ICT-related incidents, to ensure that root causes are identified, documented and addressed in order to prevent the occurrence of such incidents.

Quoted verbatim from Regulation (EU) 2022/2554 (DORA), which is in the public domain.

No cross-framework mapping is seeded for this control. That is stated rather than filled in: a mapping nobody authored is worse than a gap you can see.

These connectors produce data relevant to DORA’s Incident Management family, which is the granularity CMDash publishes — there is no pre-built per-control mapping, and claiming one would be inventing it. You decide which evidence answers which control.

Track Art.17(2) with evidence behind it

In CMDash this control is a row with an owner, a status, uploaded evidence kept with its full history, and an export an assessor can read.

Art.17(2) Early warning indicators — DORA | CMDash