[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fox1XZZuYwN-3vt282nlm5UoQR0Yj-yw72r3iRZ8RwIo":3},{"sections":4,"resultAnalysis":370,"id":449,"version":450,"newVersion":21,"label":451,"isPinned":21,"isShared":21,"sharingToken":9,"isRevision":21,"isBlockAnalysisShared":54,"nbReferences":28,"referenceId":9,"nbResponses":11,"parentId":9,"revisionDescription":9,"logoUrl":9,"description":452,"scheduleIntervalDays":9,"versionNumber":28,"dateCreation":453,"dateUpdate":454,"dateArchived":455,"archived":54,"type":456,"typeIndex":28,"typeColor":9,"typeIcon":9,"typeText":457,"creator":458,"objectType":466,"objectTypeIndex":467,"objectTypeColor":468,"objectTypeIcon":469,"objectTypeText":466,"defaultOwners":470,"tags":471,"privacyHubs":9,"nbQuestions":481,"nbQuestionsRequired":481,"nbDatas":11,"deadLineDays":9},[5,56,114,146,178,210,242,274,306,338],{"id":6,"slug":7,"label":8,"emoji":9,"type":10,"typeIndex":11,"typeColor":9,"typeIcon":9,"typeText":12,"descriptionHtml":9,"questions":13,"sections":55},"3c56cf8d-352e-4a3f-a415-8c747dd80a5a","initial","Identification of Third-Party Service Providers",null,"Default",0,"SectionType_Default",[14],{"id":15,"slug":16,"label":17,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":18,"typeIndex":19,"typeColor":9,"typeIcon":9,"typeText":20,"dynamicSelectType":9,"editableOptions":21,"complianceRules":22,"displayConditions":9,"answers":23,"listQuestions":9,"required":54,"requiredJustification":21,"suggestTask":21,"riskEnabled":54,"native":21},"73db565c-6775-453d-b527-9a7d88f96bba","1f342748-4d62-4b3a-97c3-c6f1de8f1795","Does the contract clearly identify the third-party service provider (name, contact information, legal status)?","Radio",7,"Unique choice list",false,[],[24,30,36,42,48],{"id":25,"color":26,"rangeValue":9,"label":27,"slug":9,"description":9,"score":28,"nonApplicable":21,"tooltip":9,"goodAnswer":21,"redFlag":21,"impact":9,"probability":9,"taskSuggestions":29},"8ca9a6f4-9de5-45ac-814c-2d682447e620","#dc3545","1 : No information provided",1,[],{"id":31,"color":32,"rangeValue":9,"label":33,"slug":9,"description":9,"score":34,"nonApplicable":21,"tooltip":9,"goodAnswer":21,"redFlag":21,"impact":9,"probability":9,"taskSuggestions":35},"f1425444-6097-4080-bc6c-9e1ae619478d","#E7630A","2 : Information partially provided (name only)",2,[],{"id":37,"color":38,"rangeValue":9,"label":39,"slug":9,"description":9,"score":40,"nonApplicable":21,"tooltip":9,"goodAnswer":21,"redFlag":21,"impact":9,"probability":9,"taskSuggestions":41},"152c32bc-84a3-449b-88a8-d09f5cdbbc16","#ffc107","3 : Name and complete contact information provided",3,[],{"id":43,"color":44,"rangeValue":9,"label":45,"slug":9,"description":9,"score":46,"nonApplicable":21,"tooltip":9,"goodAnswer":21,"redFlag":21,"impact":9,"probability":9,"taskSuggestions":47},"524ce181-425b-40ba-8c0c-e3187778853b","#22e292","4 : All information except legal status",4,[],{"id":49,"color":50,"rangeValue":9,"label":51,"slug":9,"description":9,"score":52,"nonApplicable":21,"tooltip":9,"goodAnswer":21,"redFlag":21,"impact":9,"probability":9,"taskSuggestions":53},"c614b35f-0f8e-4424-bfe3-0f9cb0358e77","#1e8ee1","5 : All information (name, contact details, legal status) is complete",5,[],true,[],{"id":57,"slug":58,"label":59,"emoji":9,"type":10,"typeIndex":11,"typeColor":9,"typeIcon":9,"typeText":12,"descriptionHtml":9,"questions":60,"sections":113},"8c6ce82b-852c-4368-8775-1b1eb4d6a099","description-of-services-provided","Description of Services Provided",[61,87],{"id":62,"slug":63,"label":64,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":18,"typeIndex":19,"typeColor":9,"typeIcon":9,"typeText":20,"dynamicSelectType":9,"editableOptions":21,"complianceRules":65,"displayConditions":9,"answers":66,"listQuestions":9,"required":54,"requiredJustification":21,"suggestTask":21,"riskEnabled":54,"native":21},"2b088833-c06b-46a4-978d-f90f2b8ad5f8","694539ea-74ba-487f-8812-272648642174","Is the nature of the services provided by the vendor clearly defined in the contract ?",[],[67,71,75,79,83],{"id":68,"color":26,"rangeValue":9,"label":69,"slug":9,"description":9,"score":28,"nonApplicable":21,"tooltip":9,"goodAnswer":21,"redFlag":21,"impact":9,"probability":9,"taskSuggestions":70},"f6e90dee-a637-41b0-8e2d-943a382b11e5","1 : No description of services",[],{"id":72,"color":32,"rangeValue":9,"label":73,"slug":9,"description":9,"score":34,"nonApplicable":21,"tooltip":9,"goodAnswer":21,"redFlag":21,"impact":9,"probability":9,"taskSuggestions":74},"cd4d8a79-ae2f-4ac6-afbc-3718e7c6444c","2 : Vague description of services",[],{"id":76,"color":38,"rangeValue":9,"label":77,"slug":9,"description":9,"score":40,"nonApplicable":21,"tooltip":9,"goodAnswer":21,"redFlag":21,"impact":9,"probability":9,"taskSuggestions":78},"00cbb672-c247-4475-9a43-b25cb9b0b508","3 : Partial description but not exhaustive",[],{"id":80,"color":44,"rangeValue":9,"label":81,"slug":9,"description":9,"score":46,"nonApplicable":21,"tooltip":9,"goodAnswer":21,"redFlag":21,"impact":9,"probability":9,"taskSuggestions":82},"e7c045f5-9484-4348-afef-fd3645388a48","4 : Precise description but missing some information",[],{"id":84,"color":50,"rangeValue":9,"label":85,"slug":9,"description":9,"score":52,"nonApplicable":21,"tooltip":9,"goodAnswer":21,"redFlag":21,"impact":9,"probability":9,"taskSuggestions":86},"f2198c76-5e62-42e3-9af6-40a0ea849885","5 : Detailed, precise, and exhaustive description of outsourced ICT services",[],{"id":88,"slug":89,"label":90,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":18,"typeIndex":19,"typeColor":9,"typeIcon":9,"typeText":20,"dynamicSelectType":9,"editableOptions":21,"complianceRules":91,"displayConditions":9,"answers":92,"listQuestions":9,"required":54,"requiredJustification":21,"suggestTask":21,"riskEnabled":54,"native":21},"e4f78cc1-3fd3-43e2-b6d3-d754902bdb8d","9b8a85cd-e0ce-4410-b637-81100dd8b360","Are the services provided critical for the continuity of the organization’s activities ?",[],[93,97,101,105,109],{"id":94,"color":26,"rangeValue":9,"label":95,"slug":9,"description":9,"score":28,"nonApplicable":21,"tooltip":9,"goodAnswer":21,"redFlag":21,"impact":9,"probability":9,"taskSuggestions":96},"9717929d-3b94-4fee-8c8f-6cbb468cc2d1","1 : Not mentioned in the contract",[],{"id":98,"color":32,"rangeValue":9,"label":99,"slug":9,"description":9,"score":34,"nonApplicable":21,"tooltip":9,"goodAnswer":21,"redFlag":21,"impact":9,"probability":9,"taskSuggestions":100},"2fdce40a-f8b9-47be-9c27-db5278f1a5ee","2 : Vague mention without a criticality analysis",[],{"id":102,"color":38,"rangeValue":9,"label":103,"slug":9,"description":9,"score":40,"nonApplicable":21,"tooltip":9,"goodAnswer":21,"redFlag":21,"impact":9,"probability":9,"taskSuggestions":104},"3d305663-060a-445c-b739-f003f88d02dc","3 : Mention of some critical services",[],{"id":106,"color":44,"rangeValue":9,"label":107,"slug":9,"description":9,"score":46,"nonApplicable":21,"tooltip":9,"goodAnswer":21,"redFlag":21,"impact":9,"probability":9,"taskSuggestions":108},"1c1d3f9e-80b8-49d5-9752-2da65d9cd108","4 : Identification of critical services but without an analysis of their impact",[],{"id":110,"color":50,"rangeValue":9,"label":111,"slug":9,"description":9,"score":52,"nonApplicable":21,"tooltip":9,"goodAnswer":21,"redFlag":21,"impact":9,"probability":9,"taskSuggestions":112},"e345b7cf-5fa1-4d6c-8476-984e7022afce","5 : Clear identification and in-depth analysis of the impact of critical services",[],[],{"id":115,"slug":116,"label":117,"emoji":9,"type":10,"typeIndex":11,"typeColor":9,"typeIcon":9,"typeText":12,"descriptionHtml":9,"questions":118,"sections":145},"e1d04919-7016-44d7-b327-93ba69edcf11","duration-and-terms-of-the-agreement","Duration and Terms of the Agreement",[119],{"id":120,"slug":121,"label":122,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":18,"typeIndex":19,"typeColor":9,"typeIcon":9,"typeText":20,"dynamicSelectType":9,"editableOptions":21,"complianceRules":123,"displayConditions":9,"answers":124,"listQuestions":9,"required":54,"requiredJustification":21,"suggestTask":21,"riskEnabled":54,"native":21},"75a42af4-fa5b-4816-b754-f033e7427733","62b3b5ab-7dfb-46a2-a561-469e24245d3e","Does the contract include information on the duration and renewal terms ?",[],[125,129,133,137,141],{"id":126,"color":26,"rangeValue":9,"label":127,"slug":9,"description":9,"score":28,"nonApplicable":21,"tooltip":9,"goodAnswer":21,"redFlag":21,"impact":9,"probability":9,"taskSuggestions":128},"5fbfe191-a4d3-40a5-9ca3-50a0d259eb4f","1 : No information on duration or renewal",[],{"id":130,"color":32,"rangeValue":9,"label":131,"slug":9,"description":9,"score":34,"nonApplicable":21,"tooltip":9,"goodAnswer":21,"redFlag":21,"impact":9,"probability":9,"taskSuggestions":132},"ff4c931a-6616-43a0-bc80-5af3ac2e1f86","2 : Duration mentioned but no renewal terms",[],{"id":134,"color":38,"rangeValue":9,"label":135,"slug":9,"description":9,"score":40,"nonApplicable":21,"tooltip":9,"goodAnswer":21,"redFlag":21,"impact":9,"probability":9,"taskSuggestions":136},"fd4a96b4-6aa0-4a69-bd10-2e8738332f7e","3 : Duration and renewal terms partially defined",[],{"id":138,"color":44,"rangeValue":9,"label":139,"slug":9,"description":9,"score":46,"nonApplicable":21,"tooltip":9,"goodAnswer":21,"redFlag":21,"impact":9,"probability":9,"taskSuggestions":140},"b2795632-0469-4d4f-a120-06dab2880a8c","4 : Duration and renewal terms defined but lacking details on termination conditions",[],{"id":142,"color":50,"rangeValue":9,"label":143,"slug":9,"description":9,"score":52,"nonApplicable":21,"tooltip":9,"goodAnswer":21,"redFlag":21,"impact":9,"probability":9,"taskSuggestions":144},"f368d074-2df1-4b0c-a2d5-bb27c6d640c4","5 : Duration, renewal conditions, and termination terms are clearly defined",[],[],{"id":147,"slug":148,"label":149,"emoji":9,"type":10,"typeIndex":11,"typeColor":9,"typeIcon":9,"typeText":12,"descriptionHtml":9,"questions":150,"sections":177},"10788ea0-a5ef-4a33-91f3-4691bd2005e7","access-and-auditability","Access and Auditability",[151],{"id":152,"slug":153,"label":154,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":18,"typeIndex":19,"typeColor":9,"typeIcon":9,"typeText":20,"dynamicSelectType":9,"editableOptions":21,"complianceRules":155,"displayConditions":9,"answers":156,"listQuestions":9,"required":54,"requiredJustification":21,"suggestTask":21,"riskEnabled":54,"native":21},"c56e3d7d-ec57-4d40-82cf-85fda3985cf6","6a880da7-b43a-4963-9f5b-a58c2b5fb338","Does the contract provide for provisions related to audits and inspections of the vendor ?",[],[157,161,165,169,173],{"id":158,"color":26,"rangeValue":9,"label":159,"slug":9,"description":9,"score":28,"nonApplicable":21,"tooltip":9,"goodAnswer":21,"redFlag":21,"impact":9,"probability":9,"taskSuggestions":160},"82124316-44c0-49f5-9fc1-36c99a9e09d1","1 : No audit rights mentioned",[],{"id":162,"color":32,"rangeValue":9,"label":163,"slug":9,"description":9,"score":34,"nonApplicable":21,"tooltip":9,"goodAnswer":21,"redFlag":21,"impact":9,"probability":9,"taskSuggestions":164},"baa67c33-0ec0-44ff-827e-6991bae94674","2 : Limited or vague audit rights",[],{"id":166,"color":38,"rangeValue":9,"label":167,"slug":9,"description":9,"score":40,"nonApplicable":21,"tooltip":9,"goodAnswer":21,"redFlag":21,"impact":9,"probability":9,"taskSuggestions":168},"7725e7d6-ca1f-4d91-8016-67c2ef182a5e","3 : Audit rights mentioned but without specifying the modalities",[],{"id":170,"color":44,"rangeValue":9,"label":171,"slug":9,"description":9,"score":46,"nonApplicable":21,"tooltip":9,"goodAnswer":21,"redFlag":21,"impact":9,"probability":9,"taskSuggestions":172},"d7b9d484-ce43-46bb-a075-44e58bae8e8e","4 : Audit rights well mentioned with some details on modalities",[],{"id":174,"color":50,"rangeValue":9,"label":175,"slug":9,"description":9,"score":52,"nonApplicable":21,"tooltip":9,"goodAnswer":21,"redFlag":21,"impact":9,"probability":9,"taskSuggestions":176},"74f35a34-66b6-4aa7-833f-fb3336ff1327","5 : Well-defined audit rights, clear modalities, full access to systems",[],[],{"id":179,"slug":180,"label":181,"emoji":9,"type":10,"typeIndex":11,"typeColor":9,"typeIcon":9,"typeText":12,"descriptionHtml":9,"questions":182,"sections":209},"da671137-009b-4dd6-91fa-4654b54dcbdc","risk-management-measures","Risk Management Measures",[183],{"id":184,"slug":185,"label":186,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":18,"typeIndex":19,"typeColor":9,"typeIcon":9,"typeText":20,"dynamicSelectType":9,"editableOptions":21,"complianceRules":187,"displayConditions":9,"answers":188,"listQuestions":9,"required":54,"requiredJustification":21,"suggestTask":21,"riskEnabled":54,"native":21},"38cb02d8-4afa-4d6a-a9d9-63c0701ee325","1e472009-e3e9-4371-9c49-299db3989528","Does the contract contain specific risk management measures (cybersecurity, business continuity)?",[],[189,193,197,201,205],{"id":190,"color":26,"rangeValue":9,"label":191,"slug":9,"description":9,"score":28,"nonApplicable":21,"tooltip":9,"goodAnswer":21,"redFlag":21,"impact":9,"probability":9,"taskSuggestions":192},"2a29202c-baea-4fba-9dab-38c8f023ca5b","1 : No risk management plan mentioned",[],{"id":194,"color":32,"rangeValue":9,"label":195,"slug":9,"description":9,"score":34,"nonApplicable":21,"tooltip":9,"goodAnswer":21,"redFlag":21,"impact":9,"probability":9,"taskSuggestions":196},"14db58a6-7064-4eaa-8c37-77fe88aafb60","2 : Basic risk management measures",[],{"id":198,"color":38,"rangeValue":9,"label":199,"slug":9,"description":9,"score":40,"nonApplicable":21,"tooltip":9,"goodAnswer":21,"redFlag":21,"impact":9,"probability":9,"taskSuggestions":200},"97a29448-8ad7-4147-a161-7b38bd7f3be9","3 : Partial measures but lacking a detailed continuity plan",[],{"id":202,"color":44,"rangeValue":9,"label":203,"slug":9,"description":9,"score":46,"nonApplicable":21,"tooltip":9,"goodAnswer":21,"redFlag":21,"impact":9,"probability":9,"taskSuggestions":204},"1bad5796-b49b-47e0-b349-a652146ad2b2","4 : Detailed plan but gaps in certain cybersecurity measures",[],{"id":206,"color":50,"rangeValue":9,"label":207,"slug":9,"description":9,"score":52,"nonApplicable":21,"tooltip":9,"goodAnswer":21,"redFlag":21,"impact":9,"probability":9,"taskSuggestions":208},"4361847b-dc65-4310-9255-5fc4fc5d5f9c","5 : Complete risk management measures and detailed business continuity and disaster recovery plans",[],[],{"id":211,"slug":212,"label":213,"emoji":9,"type":10,"typeIndex":11,"typeColor":9,"typeIcon":9,"typeText":12,"descriptionHtml":9,"questions":214,"sections":241},"3a4bdd6a-9033-49b7-80fe-13237c987f98","data-location-and-subcontracting","Data Location and Subcontracting",[215],{"id":216,"slug":217,"label":218,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":18,"typeIndex":19,"typeColor":9,"typeIcon":9,"typeText":20,"dynamicSelectType":9,"editableOptions":21,"complianceRules":219,"displayConditions":9,"answers":220,"listQuestions":9,"required":54,"requiredJustification":21,"suggestTask":21,"riskEnabled":54,"native":21},"bcc0c14d-40e2-43ef-a547-9bc790f6799f","48104981-2597-4fee-8c9e-016f414e603e","Does the contract mention data location and the use of subcontractors ?",[],[221,225,229,233,237],{"id":222,"color":26,"rangeValue":9,"label":223,"slug":9,"description":9,"score":28,"nonApplicable":21,"tooltip":9,"goodAnswer":21,"redFlag":21,"impact":9,"probability":9,"taskSuggestions":224},"35529355-edf8-4aa8-9e7c-76b137b49356","1 : No information on data location",[],{"id":226,"color":32,"rangeValue":9,"label":227,"slug":9,"description":9,"score":34,"nonApplicable":21,"tooltip":9,"goodAnswer":21,"redFlag":21,"impact":9,"probability":9,"taskSuggestions":228},"3a55ee48-18b0-40be-b333-04c3461d1dad","2 : Data location mentioned but no details on subcontractors",[],{"id":230,"color":38,"rangeValue":9,"label":231,"slug":9,"description":9,"score":40,"nonApplicable":21,"tooltip":9,"goodAnswer":21,"redFlag":21,"impact":9,"probability":9,"taskSuggestions":232},"fc724cdb-bb0e-4242-b8cb-8cbca0cf2fd5","3 : Data location and subcontractors partially mentioned",[],{"id":234,"color":44,"rangeValue":9,"label":235,"slug":9,"description":9,"score":46,"nonApplicable":21,"tooltip":9,"goodAnswer":21,"redFlag":21,"impact":9,"probability":9,"taskSuggestions":236},"6d7a8854-37cd-4d71-bd82-6b23d07cbfdc","4 : Clear details on data location but subcontractors are not explicitly identified",[],{"id":238,"color":50,"rangeValue":9,"label":239,"slug":9,"description":9,"score":52,"nonApplicable":21,"tooltip":9,"goodAnswer":21,"redFlag":21,"impact":9,"probability":9,"taskSuggestions":240},"c0f6714b-941b-42a8-8ab7-90e8d12d0739","5 : Well-identified data location and subcontractors with control over downstream subcontracting",[],[],{"id":243,"slug":244,"label":245,"emoji":9,"type":10,"typeIndex":11,"typeColor":9,"typeIcon":9,"typeText":12,"descriptionHtml":9,"questions":246,"sections":273},"28a533e7-6caa-426c-aff4-762f9abbc0c0","regulatory-compliance-obligations","Regulatory Compliance Obligations",[247],{"id":248,"slug":249,"label":250,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":18,"typeIndex":19,"typeColor":9,"typeIcon":9,"typeText":20,"dynamicSelectType":9,"editableOptions":21,"complianceRules":251,"displayConditions":9,"answers":252,"listQuestions":9,"required":54,"requiredJustification":21,"suggestTask":21,"riskEnabled":54,"native":21},"89fb494c-44e0-407c-b7a2-ba049df4ebd4","674949fa-8ad4-449d-886a-394eefedc7f4","Does the vendor commit to complying with applicable regulations (DORA, GDPR, etc.)?",[],[253,257,261,265,269],{"id":254,"color":26,"rangeValue":9,"label":255,"slug":9,"description":9,"score":28,"nonApplicable":21,"tooltip":9,"goodAnswer":21,"redFlag":21,"impact":9,"probability":9,"taskSuggestions":256},"d7f1898c-8fdc-4dce-8e4d-876c922c0f36","1 : No regulatory commitment",[],{"id":258,"color":32,"rangeValue":9,"label":259,"slug":9,"description":9,"score":34,"nonApplicable":21,"tooltip":9,"goodAnswer":21,"redFlag":21,"impact":9,"probability":9,"taskSuggestions":260},"b686997e-d872-43c3-86d4-1ef9470ccbb4","2 : Vague and non-specific commitment",[],{"id":262,"color":38,"rangeValue":9,"label":263,"slug":9,"description":9,"score":40,"nonApplicable":21,"tooltip":9,"goodAnswer":21,"redFlag":21,"impact":9,"probability":9,"taskSuggestions":264},"b9579171-e697-4140-a535-ad6fd38c6cb5","3 : Commitment mentioned for certain regulations but not exhaustive",[],{"id":266,"color":44,"rangeValue":9,"label":267,"slug":9,"description":9,"score":46,"nonApplicable":21,"tooltip":9,"goodAnswer":21,"redFlag":21,"impact":9,"probability":9,"taskSuggestions":268},"c48a8c4e-877b-47d5-a5c7-90cfac8904f5","4 : Well-defined commitment for most applicable regulations",[],{"id":270,"color":50,"rangeValue":9,"label":271,"slug":9,"description":9,"score":52,"nonApplicable":21,"tooltip":9,"goodAnswer":21,"redFlag":21,"impact":9,"probability":9,"taskSuggestions":272},"dcc00016-bb67-43cc-b9b8-5e0eeb5e0138","5 : Complete and detailed commitment to compliance with all applicable regulations",[],[],{"id":275,"slug":276,"label":277,"emoji":9,"type":10,"typeIndex":11,"typeColor":9,"typeIcon":9,"typeText":12,"descriptionHtml":9,"questions":278,"sections":305},"d27d9225-605a-4c63-844b-d2f88b8c536c","liability-regime","Liability Regime",[279],{"id":280,"slug":281,"label":282,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":18,"typeIndex":19,"typeColor":9,"typeIcon":9,"typeText":20,"dynamicSelectType":9,"editableOptions":21,"complianceRules":283,"displayConditions":9,"answers":284,"listQuestions":9,"required":54,"requiredJustification":21,"suggestTask":21,"riskEnabled":54,"native":21},"1b9c502b-354f-46a7-ba5c-7a9d25fabd1c","00fe7482-b080-485c-9526-c924761b414f","Does the contract specify a liability regime in case of an incident ?",[],[285,289,293,297,301],{"id":286,"color":26,"rangeValue":9,"label":287,"slug":9,"description":9,"score":28,"nonApplicable":21,"tooltip":9,"goodAnswer":21,"redFlag":21,"impact":9,"probability":9,"taskSuggestions":288},"d7ab245c-2167-474d-8216-981f214ee105","1 : No mention of liability",[],{"id":290,"color":32,"rangeValue":9,"label":291,"slug":9,"description":9,"score":34,"nonApplicable":21,"tooltip":9,"goodAnswer":21,"redFlag":21,"impact":9,"probability":9,"taskSuggestions":292},"1d67bc2d-dd0d-4871-9bb4-b9071e3ca89e","2 : Vague mention of liability without details",[],{"id":294,"color":38,"rangeValue":9,"label":295,"slug":9,"description":9,"score":40,"nonApplicable":21,"tooltip":9,"goodAnswer":21,"redFlag":21,"impact":9,"probability":9,"taskSuggestions":296},"496a83cd-5e66-4f8d-ad81-b901941e2506","3 : Liability regime partially defined",[],{"id":298,"color":44,"rangeValue":9,"label":299,"slug":9,"description":9,"score":46,"nonApplicable":21,"tooltip":9,"goodAnswer":21,"redFlag":21,"impact":9,"probability":9,"taskSuggestions":300},"1d28596b-a8ee-4688-85cb-7bcc35994e31","4 : Liability regime clearly defined but without specific penalties",[],{"id":302,"color":50,"rangeValue":9,"label":303,"slug":9,"description":9,"score":52,"nonApplicable":21,"tooltip":9,"goodAnswer":21,"redFlag":21,"impact":9,"probability":9,"taskSuggestions":304},"0d6d8c75-75e9-4c91-8564-d6cab49dc456","5 : Liability regime and financial penalties or compensation clearly established",[],[],{"id":307,"slug":308,"label":309,"emoji":9,"type":10,"typeIndex":11,"typeColor":9,"typeIcon":9,"typeText":12,"descriptionHtml":9,"questions":310,"sections":337},"3d13478a-26e3-423d-8ea1-9a00da95193b","incident-notification-mechanisms","Incident Notification Mechanisms",[311],{"id":312,"slug":313,"label":314,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":18,"typeIndex":19,"typeColor":9,"typeIcon":9,"typeText":20,"dynamicSelectType":9,"editableOptions":21,"complianceRules":315,"displayConditions":9,"answers":316,"listQuestions":9,"required":54,"requiredJustification":21,"suggestTask":21,"riskEnabled":54,"native":21},"3650f950-c948-4bc7-875a-f9683b7878ca","af3b787b-aaea-4249-a378-2c54b56720d1","Does the contract include mechanisms for the notification of security incidents or service interruptions ?",[],[317,321,325,329,333],{"id":318,"color":26,"rangeValue":9,"label":319,"slug":9,"description":9,"score":28,"nonApplicable":21,"tooltip":9,"goodAnswer":21,"redFlag":21,"impact":9,"probability":9,"taskSuggestions":320},"7c41620a-5c45-4f4f-b51d-24cfc456aea3","1 : No notification mechanism mentioned",[],{"id":322,"color":32,"rangeValue":9,"label":323,"slug":9,"description":9,"score":34,"nonApplicable":21,"tooltip":9,"goodAnswer":21,"redFlag":21,"impact":9,"probability":9,"taskSuggestions":324},"ac760c30-bc0c-445e-8c3d-4a153c8732e5","2 : Notification mechanisms vague or incomplete",[],{"id":326,"color":38,"rangeValue":9,"label":327,"slug":9,"description":9,"score":40,"nonApplicable":21,"tooltip":9,"goodAnswer":21,"redFlag":21,"impact":9,"probability":9,"taskSuggestions":328},"dce34bb5-aefa-4aa7-89dc-1116b811c567","3 : Mechanisms mentioned but without details on timelines or modalities",[],{"id":330,"color":44,"rangeValue":9,"label":331,"slug":9,"description":9,"score":46,"nonApplicable":21,"tooltip":9,"goodAnswer":21,"redFlag":21,"impact":9,"probability":9,"taskSuggestions":332},"3d1b1c50-b15b-4e3c-b74e-d5960f6489dd","4 : Well-defined notification mechanisms but long notification timelines",[],{"id":334,"color":50,"rangeValue":9,"label":335,"slug":9,"description":9,"score":52,"nonApplicable":21,"tooltip":9,"goodAnswer":21,"redFlag":21,"impact":9,"probability":9,"taskSuggestions":336},"19655281-3fbe-4d6e-9b5a-093d2f21c806","5 : Complete notification mechanisms, with short timelines and clear modalities",[],[],{"id":339,"slug":340,"label":341,"emoji":9,"type":10,"typeIndex":11,"typeColor":9,"typeIcon":9,"typeText":12,"descriptionHtml":9,"questions":342,"sections":369},"f362017a-f84e-47fc-b386-37efdcdf7ee9","ongoing-evaluation-and-performance-review","Ongoing Evaluation and Performance Review",[343],{"id":344,"slug":345,"label":346,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":18,"typeIndex":19,"typeColor":9,"typeIcon":9,"typeText":20,"dynamicSelectType":9,"editableOptions":21,"complianceRules":347,"displayConditions":9,"answers":348,"listQuestions":9,"required":54,"requiredJustification":21,"suggestTask":21,"riskEnabled":54,"native":21},"20ed1f3e-aa27-4cb5-bae5-be6c39857ddf","a0fb1dfd-6951-4857-9812-17475dac6136","Does the contract provide for ongoing evaluations and performance reviews of the vendor ?",[],[349,353,357,361,365],{"id":350,"color":26,"rangeValue":9,"label":351,"slug":9,"description":9,"score":28,"nonApplicable":21,"tooltip":9,"goodAnswer":21,"redFlag":21,"impact":9,"probability":9,"taskSuggestions":352},"fc10878e-849c-45e8-aa9d-62f246743f5c","1 : No provision for ongoing evaluation",[],{"id":354,"color":32,"rangeValue":9,"label":355,"slug":9,"description":9,"score":34,"nonApplicable":21,"tooltip":9,"goodAnswer":21,"redFlag":21,"impact":9,"probability":9,"taskSuggestions":356},"1e45dbc5-f1f6-4cb6-a176-898d60bb557e","2 : Very limited provisions for evaluation",[],{"id":358,"color":38,"rangeValue":9,"label":359,"slug":9,"description":9,"score":40,"nonApplicable":21,"tooltip":9,"goodAnswer":21,"redFlag":21,"impact":9,"probability":9,"taskSuggestions":360},"2c981500-0a9e-4143-b7b1-6d24f4d1c200","3 : Evaluations planned but frequency or criteria not specified",[],{"id":362,"color":44,"rangeValue":9,"label":363,"slug":9,"description":9,"score":46,"nonApplicable":21,"tooltip":9,"goodAnswer":21,"redFlag":21,"impact":9,"probability":9,"taskSuggestions":364},"18ca9f99-d902-4ec9-99e6-48c613944f72","4 : Regular evaluations planned but without details on performance criteria",[],{"id":366,"color":50,"rangeValue":9,"label":367,"slug":9,"description":9,"score":52,"nonApplicable":21,"tooltip":9,"goodAnswer":21,"redFlag":21,"impact":9,"probability":9,"taskSuggestions":368},"1953fa68-f465-4897-8247-cfd2650eaef0","5 : Regular evaluations, performance criteria clearly defined, and detailed review modalities",[],[],[371,389,404,421,436],{"id":372,"label":373,"variant":374,"variantIndex":28,"variantColor":375,"variantIcon":376,"variantText":374,"contentHtml":377,"displayConditions":378},"90dd075c-bc55-488a-a396-62bc3fb1d7da","Excellent compliance with the DORA standard.","Success","#1ab586","icon-checkmark","\u003Cp>The contract is well-structured, with comprehensive operational resilience measures.\u003C/p>",{"id":379,"separator":380,"field":9,"operator":381,"value":9,"rules":382},"33b40deb-20af-42ba-a16a-abe5a1c60663","And","equal",[383],{"id":384,"separator":9,"field":385,"operator":386,"value":387,"rules":388},"544b9cbd-f93c-462d-a800-b8d6d207eaa4","readiness","greaterThan",80,[],{"id":390,"label":391,"variant":374,"variantIndex":28,"variantColor":375,"variantIcon":376,"variantText":374,"contentHtml":392,"displayConditions":393},"5631bf0a-593d-4434-81b1-ab4a44ded3ce","Good compliance.","\u003Cp>Some sections could be improved to enhance alignment with the DORA standard.\u003C/p>",{"id":394,"separator":380,"field":9,"operator":381,"value":9,"rules":395},"e939e46a-631c-45a3-8505-bab63742b391",[396,400],{"id":397,"separator":9,"field":385,"operator":398,"value":387,"rules":399},"dbfef74e-240c-48e0-9ce6-635df25fd0df","lessThanInclusive",[],{"id":401,"separator":9,"field":385,"operator":386,"value":402,"rules":403},"7a25ca0f-3cea-4c21-a87d-ac7c740ed47b",61,[],{"id":405,"label":406,"variant":407,"variantIndex":34,"variantColor":38,"variantIcon":408,"variantText":407,"contentHtml":409,"displayConditions":410},"4b314caa-c075-4ebf-8e58-ee761f6b642c","Average compliance.","Warning","icon-alert-circle","\u003Cp>The contract covers some DORA requirements, but critical elements are missing.\u003C/p>",{"id":411,"separator":380,"field":9,"operator":381,"value":9,"rules":412},"54e2b9ae-40f4-483b-9400-14429f263e5f",[413,417],{"id":414,"separator":9,"field":385,"operator":398,"value":415,"rules":416},"78a15b7c-e295-4793-9abe-0e88d70bf03c",60,[],{"id":418,"separator":9,"field":385,"operator":386,"value":419,"rules":420},"494de720-9167-43c0-98d3-6334fb762ce0",41,[],{"id":422,"label":423,"variant":407,"variantIndex":34,"variantColor":38,"variantIcon":408,"variantText":407,"contentHtml":424,"displayConditions":425},"f727ce2d-3dc8-4976-99ff-d8c395f0c4ba","Low compliance.","\u003Cp>Significant efforts are needed to meet the DORA requirements.\u003C/p>",{"id":426,"separator":380,"field":9,"operator":381,"value":9,"rules":427},"41c0ed1d-99c1-4a5f-9429-fe3050e00d9a",[428,432],{"id":429,"separator":9,"field":385,"operator":398,"value":430,"rules":431},"65aec9bd-dfcd-4644-aaaa-3df1dc488d05",40,[],{"id":433,"separator":9,"field":385,"operator":386,"value":434,"rules":435},"55855be1-9ab9-4c70-b67d-5cd71a2750c6",20,[],{"id":437,"label":438,"variant":439,"variantIndex":40,"variantColor":440,"variantIcon":441,"variantText":439,"contentHtml":442,"displayConditions":443},"88ab0dc7-85eb-4d1d-9396-488ba2dac45f","Non-compliant.","Danger","#DC3545","icon-alert-triangle","\u003Cp>The contract has serious deficiencies and does not meet DORA requirements.\u003C/p>",{"id":444,"separator":380,"field":9,"operator":381,"value":9,"rules":445},"ca7a88a9-c179-4533-a397-3da31ed0bb21",[446],{"id":447,"separator":9,"field":385,"operator":398,"value":434,"rules":448},"eae2d514-61b6-4133-8b07-c354239074f0",[],"176edda3-88b8-43c6-2fac-08dce3803f9a","1.0","Questionnaire for assessing compliance of a contract with the DORA standard","Here is a list of questions organized by sections to assess the level of compliance of a contract with the DORA standard, based on key information that must be included in the information register. Each answer is weighted with points from 1 to 5, allowing a graduated evaluation of the compliance level.","2024-10-03T13:59:38.4733606","2025-09-16T14:45:19.573001","2026-03-04T22:36:39.5236511","Compliance","Cyver compliance",{"id":459,"displayName":460,"familyName":461,"givenName":462,"email":463,"active":54,"color":464,"avatarUrl":465,"tenantId":11},38,"Paul-Emmanuel Bidault","Bidault","Paul-Emmanuel","paulemmanuel.bidault@dastra.eu","#FA4115","https://static.dastra.eu/tenant-27/avatar/38/paul-emmanuel-bidault-150.jpg","Contract",10,"#87CEEB","ds-icon-contract",[],[472],{"id":473,"label":474,"type":475,"typeIndex":476,"typeColor":477,"typeIcon":478,"typeText":479,"color":480},"23899e36-9a05-446a-918b-6d4f61c45ed5","Cybersecurity","AuditTemplate",9,"#83d162","ds-icon-audit","Questionnaire template","#E18D7F",11]