DORA-Art14-P1

ICT Incident Lessons Learned Reports PARTIAL

Plain text reports documenting lessons learned from ICT-related incidents, including root cause analysis, corrective actions, and process improvements as required by DORA Article 14.

Formats

PLAIN_TEXT PDF

Evidence Class

ict-lessons-learned

Availability

PARTIAL

Update Frequency

event-driven

Typical Author

Incident Manager

Approval Chain

Incident Manager → CISO

Content Sections

• Incident Summary
• Root Cause Analysis
• Impact Assessment
• Corrective Actions
• Process Improvements
• Follow-Up Status

Expected Fields

• incident_id
• incident_date
• root_cause
• corrective_actions
• improvement_status
• follow_up_date

Common Quality Issues

• Lessons learned conducted only for major incidents
• Root cause analysis superficial — stops at proximate cause
• Corrective actions identified but not tracked to completion
• No systematic process for incorporating lessons into policies

ict_lessons_learned_status

Schema ID

fs-ict-lessons-learned

Control

DORA-Art14-P1

Valid Ranges

reporting_period_end

within last 12 months

lessons_documented

should be >= incidents_reviewed for thorough process

JSON Schema

{
  "properties": {
    "corrective_actions_completed": {
      "minimum": 0,
      "type": "integer"
    },
    "corrective_actions_identified": {
      "minimum": 0,
      "type": "integer"
    },
    "incidents_reviewed": {
      "minimum": 0,
      "type": "integer"
    },
    "lessons_documented": {
      "minimum": 0,
      "type": "integer"
    },
    "policy_changes_triggered": {
      "minimum": 0,
      "type": "integer"
    },
    "reporting_period_end": {
      "format": "date",
      "type": "string"
    },
    "reporting_period_start": {
      "format": "date",
      "type": "string"
    },
    "root_cause_analyses_performed": {
      "minimum": 0,
      "type": "integer"
    }
  },
  "required": [
    "reporting_period_start",
    "reporting_period_end",
    "incidents_reviewed",
    "lessons_documented"
  ],
  "type": "object"
}