Overlay · not the system of recordHolds sit above scoreAsk Desk is deterministic — no modelLocal

GRC / regulatory analyst

DORA overlap for EU branch

EU DORA · ICT risk

Ask · Harm is high or the packet is incomplete. Do not auto-clear.

Need more · Standard

PriorityP3

Severitymoderate

PacketNeed more

SuggestedMonitor

Why this is here

EU branch is in scope. US parent controls are mapped to NYDFS, not DORA incident clocks.

PerimeterEU branch, 40 people
ClockDORA major-incident 4h notify
OpenPagesNo DORA library loaded

Need more

Ask the source system to fill this. Desk does not become the record.

AskHarm is high or the packet is incomplete. Do not auto-clear.

Recommended. Monitor. Build a mapping, do not clone a second GRC tree yet.

Whether the NY booking entity is in scope is still a legal call.

Current: Need more · open

Overlay only. Will POST a label to the write-back URL, never a funds release. IBM OpenPages OPSS-Iss:WorkflowStatus=WATCH on reg-dora · 1 ask. Desk is not the system of record.