Since January 2025, DORA requires a programme for testing digital operational resilience. MaRisk and internal audit reviews require traceable tests and sign-offs.
We plan tests so that the evidence is created along the way and doesn't have to be gathered afterwards.

