Refink offers three distinct services:
The DORA implementation consulting operates ex ante, supporting the management body on governance and organization aspects, aimed at building the system in compliance with the Regulation, including policies, procedures, and first-level controls plan; the activity concludes once the system is implemented.
The ICT risk control (second level) operates subsequently and independently, consistent with Article 6 paragraph 4; it maps and continuously monitors ICT risk exposure and the effectiveness of safeguards. It measures the system's resilience against risk.
The ICT risk audit (third level) provides independent assurance of the entire system with ex-post and independent assessment; it verifies the adequacy of the first and second lines, the outcomes of operational resilience tests, and performs remediation follow-up.
This structure is adopted to ensure separation of roles, independence of control functions, and consistency with supervisory expectations.
Milan
Piazza Giuseppe Missori, 2 – 20122
Rome
Via Ludovisi, 45 – 00187
(MI) +39 02.36.63.92.21
info@refink.eu
You may choose to prevent this website from aggregating and analyzing the actions you take here. Doing so will protect your privacy, but will also prevent the owner from learning from your actions and creating a better experience for you and other users.
Puoi scegliere di impedire a questo sito web di aggregare e analizzare le azioni che intraprendi qui. Ciò proteggerà la tua privacy, ma impedirà al proprietario di imparare dalle tue azioni e di creare un'esperienza migliore per te e per gli altri utenti.
