Skip to content
Cyber Compliance

CIS Controls v8 → DORA crosswalk

A control-by-control mapping between CIS Critical Security Controls v8 and Digital Operational Resilience Act (EU 2022/2554). 4 mappings.

CIS Controls v8DORARelationshipNotes
11.1
Establish and maintain a data recovery process
Art. 12
Backup policies and recovery procedures
EquivalentCurated
Sauvegarde et restauration
3.11
Encrypt sensitive data at rest
Art. 9
Protection and prevention
PartialCurated
Cryptographie et protection des données
6.1
Establish an access granting process
Art. 9
Protection and prevention
PartialCurated
Contrôle d'accès et identité
8.1
Establish and maintain an audit log management process
Art. 10
Detection
PartialCurated
Journalisation, surveillance et détection

Mappings marked “Official” derive from standards-body informative references; “Curated” mappings are authored by Cyber Compliance and provided for guidance only.