Skip to content
Cyber Compliance

DORA → GLBA crosswalk

A control-by-control mapping between Digital Operational Resilience Act (EU 2022/2554) and GLBA Safeguards Rule (16 CFR Part 314). 6 mappings.

DORAGLBARelationshipNotes
Art. 10
Detection
§314.4(c)(8)
Monitoring and logging of authorized user activity
PartialCurated
Logging, monitoring & detection
Art. 17
ICT-related incident management process
§314.4(h)
Incident response plan
PartialCurated
Incident response & breach notification
Art. 19
Reporting of major ICT-related incidents
§314.4(h)
Incident response plan
PartialCurated
Incident response & breach notification
Art. 6
ICT risk management framework
§314.4(a)
Designate a qualified individual
RelatedCurated
Governance & security policy
Art. 9
Protection and prevention
§314.4(c)(1)
Access controls
PartialCurated
Access control & identity
Art. 9
Protection and prevention
§314.4(c)(3)
Encryption of customer information
PartialCurated
Cryptography & data protection

Mappings marked “Official” derive from standards-body informative references; “Curated” mappings are authored by Cyber Compliance and provided for guidance only.