Skip to content
Cyber Compliance

DORA → GLBA crosswalk

A control-by-control mapping between Digital Operational Resilience Act (EU 2022/2554) and GLBA Safeguards Rule (16 CFR Part 314). 6 mappings.

DORAGLBARelationshipNotes
Art. 10
Detection
§314.4(c)(8)
Monitoring and logging of authorized user activity
PartialCurated
Journalisation, surveillance et détection
Art. 17
ICT-related incident management process
§314.4(h)
Incident response plan
PartialCurated
Réponse aux incidents et notification des violations
Art. 19
Reporting of major ICT-related incidents
§314.4(h)
Incident response plan
PartialCurated
Réponse aux incidents et notification des violations
Art. 6
ICT risk management framework
§314.4(a)
Designate a qualified individual
RelatedCurated
Gouvernance et politique de sécurité
Art. 9
Protection and prevention
§314.4(c)(1)
Access controls
PartialCurated
Contrôle d'accès et identité
Art. 9
Protection and prevention
§314.4(c)(3)
Encryption of customer information
PartialCurated
Cryptographie et protection des données

Mappings marked “Official” derive from standards-body informative references; “Curated” mappings are authored by Cyber Compliance and provided for guidance only.