What we can evidence today and what is in preparation
Regulation requires knowing the impact of outages on services, reporting major incidents within deadlines and keeping an overview of ICT services and providers. Without a reliable dependency map this is manual work.
Available today
- A dependency map from business service to infrastructure and redundancy-aware impact calculation
- An owner for every service, scoped roles and a RACI matrix checked against permissions
- An immutable five-year audit trail, with before and after state for configuration
- Managed changes with approval, maintenance windows and freezes
- Service contracts and vendor SLAs, incident escalation to the vendor
- Vulnerabilities by service with deadlines by severity
- Incidents with affected services and major incidents
In preparation In preparation
- Major incident classification against NIS2 and DORA criteria, from the impact in the CMDB
- A pre-filled report for the national authorities
- A register of ICT services and providers under DORA
How it will work
The Classification and Report steps are in preparation. We will confirm the timing with pilot customers.
Incident and impact
Affected services and their criticality from the dependency map.
Classification
Assessment against the major incident criteria.
Report
A pre-filled report with timeline and impact.
Decision
A person always reviews and submits.
Stilla does not replace legal assessment. Review your NIS2 and DORA obligations with your compliance team.
Frequently asked questions
Does Stilla help with NIS2 and DORA compliance?
It provides the data foundation: a dependency map with impact calculation, an owner for every service, roles and RACI, managed changes, vendor contracts and SLAs, vulnerabilities by service and an immutable audit trail. It does not replace legal assessment.
Can Stilla prepare a major incident report?
Not yet. Major incident classification against NIS2 and DORA criteria and a pre-filled report are in preparation. A person will always review and submit.
Does Stilla keep a DORA register of ICT services and providers?
The DORA register is in preparation. Stilla already records services, vendors, service contracts and vendor SLAs, which the register will build on.
How long is the audit trail kept?
Five years. Records cannot be changed or deleted earlier, and for configuration the state before and after each change is stored.
Start with a pilot in one area.
Pick a customer or a department and its key services. After the pilot we review SLAs, changes and costs together – and you decide on expansion with peace of mind.