Critical or important functions
Register critical functions with MTPD, RTO, RPO and an owner, linked to systems, assets, suppliers and controls.
Framework-specific surfaces
The operational DORA scope, without chasing separate spreadsheets.
Critical functions, ICT incidents, resilience tests and ICT suppliers stay connected to the same controls and evidence used across the rest of your compliance scope.
Evidence requests to suppliers
Every request links the control, the supplier, the status and the expiry date, including for DORA ICT suppliers.
What it includes
ICT incidents tracked
Record operational incidents with a DORA profile, status and notification stage: initial, intermediate, final.
Resilience testing
Plan and run vulnerability tests, disaster recovery, backup/restore, penetration tests and tabletop scenarios.
ICT suppliers and third parties
Track whether a supplier provides ICT services, supports a critical function, holds audit rights, has a documented exit plan and where data is located.
How it works
Register the critical functions
Define scope, owner and links to systems, assets and suppliers.
Assess ICT suppliers
Check critical services, audit rights, exit plan and data location.
Plan and run resilience tests
From vulnerability testing to tabletop scenarios.
Record ICT incidents
Track status, cause and notification stage, linked to the available evidence.
Available with
Modules: Resilience and ICT incidents, Risk register, Compliance inventory
Frameworks: DORA
AuditReady supports compliance work; it does not replace the customer’s assessments, obligations, or decisions.
Connects with
Prepare for resilience and record what actually happens.
AuditReady separates exercises from operational incidents: both generate learning, findings and evidence, but they remain two separate registers.
ExploreA risk register connected to your controls.
Assess likelihood and impact before and after controls, assign a treatment and bring the rationale and available evidence into review.
ExploreMake your compliance scope explicit and reviewable.
From entity profiling to board attestations, from policies to assets: AuditReady connects the elements that define the scope you need to govern.
ExploreFrequently asked questions
Does AuditReady generate the DORA Register of Information (RoI)?
Not yet: today AuditReady covers critical functions, ICT incidents, resilience tests and ICT suppliers; export in the RoI format is not available.
Are ICT incidents different from simulations?
Yes, they remain two separate registers: real incidents and tabletop exercises.
Can I link a supplier to a critical function?
Yes, you can link ICT suppliers to the critical or important functions they support.