Policy Register
ICT Risk Framework · under review
ICT Risk Framework
Draft v3.2
Policy published — POL-2606031 v3.2
Routed to Architecture Review Board for sign-off.
Review Queue
Architecture Review Board · 1 submission awaiting decision
ICT Risk Framework — Policy Update Sign-off
Awaiting Decision
Decision recorded — DR-2606221
Approved · timestamped · linked back to POL-2606031.
Exemptions
New exception requested against updated policy
Legacy Vendor — Threshold Exception
Drafting
Exception logged — EXM-2606221
Time-bound to 21 Sep 2026. Will auto-flag on expiry — nothing lingers silently.
Regulatory Posture
Live — evidence generated as governance happens
Policy update published — POL-2606031 v3.2
DORA Art. 5
Decision recorded — DR-2606221
DORA Art. 5
Exception logged — EXM-2606221
DORA Art. 5
DORA — ICT Risk Management posture
92%
Audit-ready, automatically
Every step above is already mapped to DORA — nothing assembled after the fact.