Art 24 - General requirements for digital operational resilience testing

Art 24 of the EU Digital Operational Resilience Act sets out the mandatory standards for testing the digital resilience of financial entities, requiring regular, comprehensive assessments of ICT systems, processes and dependencies. It obliges firms to adopt well-designed testing methodologies, document results, address identified weaknesses promptly, and ensure that testing outcomes are integrated into overall risk management and governance frameworks.