DORA Attribute Mapping Reference
The DORA Report Generation feature is available for customers with solution packaging only.
The table below shows a complete list of OneTrust DORA system attributes compared with the name of the attribute as it appears in the DORA Register of Information (ROI).
|
Object Type |
Name of Attribute in DORA ROI |
Name of Attribute in MyOneTrust |
Notes |
|---|---|---|---|
|
Legal Entity |
b_01.01.0010 LEI of the entity maintaining the register of information |
LEI of the entity |
These attributes reference an LEI of the entity being reported, or the LEI of a related entity. By optimizing each of these requirements into a single attribute, OneTrust prevents duplication of data entry while still maintaining the integrity of the ROI by pulling in the LEI's of related entities where applicable in the report. |
|
Legal Entity |
b_01.02.0010 LEI of the entity |
||
|
Legal Entity |
b_01.02.0060 LEI of the direct parent undertaking of the entity |
||
|
Legal Entity |
b_01.03.0020 LEI of the financial entity head office of the branch |
||
|
Legal Entity |
b_02.02.0020 LEI of the entity making use of the ICT service(s) |
||
|
Legal Entity |
b_03.01.0020 LEI of the entity signing the contractual arrangement |
||
|
Legal Entity |
b_03.03.0020 LEI of the entity providing ICT services |
||
|
Legal Entity |
b_04.01.0020 LEI of the entity making use of the ICT service(s) |
||
|
Legal Entity |
b_06.01.0040 LEI of the financial entity |
||
|
Legal Entity |
b_02.02.0050 Function identifier |
Function identifier |
By optimizing the function identifier requirements into a single attribute, OneTrust prevents duplication of data entry while still maintaining the integrity of the ROI by pulling in the value of this attribute where applicable in the report. |
|
Legal Entity |
b_06.01.0010 Function Identifier |
||
|
Legal Entity |
b_06.01.0030 Function name |
Function name |
|
|
Legal Entity |
b_01.03.0010 Identification code of the branch |
Identification code of the branch |
By optimizing the identification code of the branch requirements into a single attribute, OneTrust prevents duplication of data entry while still maintaining the integrity of the ROI by pulling in the value of this attribute where applicable in the report. |
|
Legal Entity |
b_04.01.0040 Identification code of the branch |
||
|
Legal Entity |
b_01.01.0020 Name of the entity |
Name of the entity |
These attributes reference the name of the entity being reported or the name of a related entity. By optimizing each of these requirements into a single attribute, OneTrust prevents duplication of data entry while still maintaining the integrity of the ROI by pulling in the names of related entities where applicable in the report. |
|
Legal Entity |
b_01.02.0020 Name of the entity |
||
|
Legal Entity |
b_01.03.0030 Name of the Branch |
||
|
Legal Entity |
b_01.01.0030 Country of the entity |
Country of the entity |
By optimizing the country of the entity requirements into a single attribute, OneTrust prevents duplication of data entry while still maintaining the integrity of the ROI by pulling in the value of this attribute where applicable in the report. |
|
Legal Entity |
b_01.02.0030 Country of the entity |
||
|
Legal Entity |
b_01.03.0040 Country of the Branch |
||
|
Legal Entity |
b_01.01.0040 Type of entity |
Type of entity |
By optimizing the Type of entity requirements into a single attribute, OneTrust prevents duplication of data entry while still maintaining the integrity of the ROI by pulling in the value of this attribute where applicable in the report. |
|
Legal Entity |
b_01.02.0040 Type of entity |
||
|
Legal Entity |
b_01.01.0050 Competent Authority |
Competent Authority |
|
|
Legal Entity |
b_01.01.0060 Date of the reporting |
Date of the reporting |
|
|
Legal Entity |
b_01.02.0050 Hierarchy of the entity within the group (where applicable) |
Hierarchy of the entity within the group (where applicable) |
|
|
Legal Entity |
b_01.02.0070 Date of last update |
Date of last update |
|
|
Legal Entity |
b_01.02.0080 Date of integration in the Register of information |
Date of integration in the Register of information |
|
|
Legal Entity |
b_01.02.0090 Date of deletion in the Register of information |
Date of deletion in the Register of information |
|
|
Legal Entity |
b_01.02.0100 Currency Of Entity |
Currency Of Entity |
|
|
Legal Entity |
b_01.02.0110 Value of total assets - of the financial entity |
Value of total assets - of the financial entity |
|
|
Legal Entity |
b_06.01.0060 Reasons for criticality or importance |
Reasons for criticality or importance |
|
|
Legal Entity |
b_06.01.0070 Date of the last assessment of criticality or importance |
Date of the last assessment of criticality or importance |
|
|
Legal Entity |
b_06.01.0080 Recovery time objective of the function |
Recovery time objective of the function |
|
|
Legal Entity |
b_06.01.0090 Recovery point objective of the function |
Recovery point objective of the function |
|
|
Legal Entity |
b_04.01.0030 Nature of the entity making use of the ICT service(s) |
Nature of the entity making use of the ICT service(s) |
|
|
Legal Entity |
b_06.01.0020 Licensed activity |
Licensed activity |
|
|
Legal Entity |
b_06.01.0050 Criticality or importance assessment |
Criticality or importance assessment |
|
|
Legal Entity |
b_06.01.0100 Impact of discontinuing the function |
Impact of discontinuing the function |
|
|
Legal Entity |
(OT created) Maintainer of the Register of Information |
Maintainer of the Register of Information |
|
|
Vendor |
b_02.02.0030 Identification code of the ICT third-party service provider |
Identification code of ICT third-party service provider |
These attributes reference an Identification code of the ICT third-party service provider of the vendor being reported or the Identification code of the ICT third-party service provider of a related vendor. By optimizing each of these requirements into a single attribute, OneTrust prevents duplication of data entry while still maintaining the integrity of the ROI by pulling in the identification code of the ICT third-party service provider where applicable in the report. |
|
Vendor |
b_03.02.0020 Identification code of ICT third-party service provider |
||
|
Vendor |
b_05.01.0010 Identification code of ICT third-party service provider |
||
|
Vendor |
b_05.01.0060 Currency of the amount reported in total annual expense or estimated cost of the ICT third-party service provider |
||
|
Vendor |
b_05.02.0030 Identification code of the ICT third-party service provider |
||
|
Vendor |
b_07.01.0020 Identification code of the ICT third-party service provider |
||
|
Vendor |
b_02.02.0040 Type of code to identify the ICT third-party service provider |
Type of code to identify the ICT third-party service provider |
|
|
Vendor |
b_03.02.0030 Type of code to identify the ICT third-party service provider |
||
|
Vendor |
b_05.01.0020 Type of code to identify the ICT third-party service provider |
||
|
Vendor |
b_05.02.0040 Type of code to identify the ICT third-party service provider |
||
|
Vendor |
b_07.01.0030 Type of code to identify the ICT third-party service provider |
||
|
Vendor |
b_07.01.0070 Date of the last audit on the ICT third-party service provider |
Date of the last audit on the ICT third-party service provider |
|
|
Vendor |
b_05.01.0040 Type of person of the ICT third-party service provider |
Type of person of the ICT third-party service provider |
|
|
Vendor |
b_05.01.0050 Legal name of the ICT third-party service provider |
Legal name of the ICT third-party service provider |
|
|
Vendor |
b_05.01.0070 Type of person of the ICT third-party service provider |
Type of person of the ICT third-party service provider |
|
|
Vendor |
b_07.01.0050 Substitutability of the ICT third-party service provider |
Substitutability of the ICT third-party service provider |
|
|
Vendor |
b_05.02.0050 Rank |
Rank |
|
|
Vendor |
b_05.01.0090 Type of code to identify the ICT third-party service provider’s ultimate parent undertaking |
Type of code to identify the ICT third-party service provider’s ultimate parent undertaking |
|
|
Vendor |
b_05.01.0080 Country of the ICT third-party service provider’s headquarters |
Country of the ICT third-party service provider’s headquarters |
|
|
Vendor |
b_05.01.0100 Total annual expense or estimated cost of the ICT third-party service provider |
Total annual expense or estimated cost of the ICT third-party service provider |
|
|
Vendor |
B_05.01.0110 Identification code of the ICT third-party service provider’s ultimate parent undertaking |
Identification code of the ICT third-party service provider’s ultimate parent undertaking |
|
|
Vendor |
B_05.01.0120 Type of code to identify the ICT third-party service provider’s ultimate parent undertaking |
Type of code to identify the ICT third-party service provider’s ultimate parent undertaking |
|
|
Vendor |
b_05.01.0090 Currency of the amount reported in B_05.01.0070 |
Currency of the amount reported in total annual expense or estimated cost of the ICT third-party service provider |
|
|
Vendor |
b_05.02.0060 Identification code of the recipient of sub-contracted ICT services |
||
|
Vendor |
b_05.02.0070 Type of code to identify the recipient of sub-contracted ICT services |
||
|
Engagement |
b_02.02.0060 Type of ICT services |
Type of ICT services |
All of these attributes reference an Types of ICT services of the engagement being reported on. By optimizing each of these requirements into a single attribute, OneTrust prevents duplication of data entry while still maintaining the integrity of the ROI by pulling in the type of ICT services value where applicable in the report. |
|
Engagement |
b_05.02.0020 Type of ICT services |
||
|
Engagement |
b_07.01.0040 Type of ICT services |
||
|
Engagement |
b_02.02.0100 Notice period for the financial entity making use of the ICT service(s) |
Notice period for the financial entity making use of the ICT service(s) |
|
|
Engagement |
b_02.02.0110 Notice period for the ICT third-party service provider |
Notice period for the ICT third-party service provider |
|
|
Engagement |
b_02.02.0130 Country of provision of the ICT services |
Country of provision of the ICT services |
|
|
Engagement |
b_02.02.0140 Storage of data |
Storage of data |
|
|
Engagement |
b_02.02.0170 Sensitiveness of the data stored by the ICT third-party service provider |
Sensitiveness of the data stored by the ICT third-party service provider |
|
|
Engagement |
b_02.02.0160 Location of management of the data (processing) |
Location of management of the data (processing) |
|
|
Engagement |
b_02.02.0150 Location of the data at rest (storage) |
Location of the data at rest (storage) |
|
|
Engagement |
b_07.01.0110 Are there alternative ICT third-party service providers identified? |
Are there alternative ICT third-party service providers identified? |
|
|
Engagement |
b_02.02.0180 Level of reliance on the ICT service supporting the critical or important function |
Level of reliance on the ICT service supporting the critical or important function |
|
|
Engagement |
b_07.01.0060 Reason if the ICT third-party service provider is considered not substitutable or difficult to be substitutable |
Reason if the ICT third-party service provider is considered not substitutable or difficult to be substitutable |
|
|
Engagement |
b_07.01.0100 Impact of discontinuing the ICT services |
Impact of discontinuing the ICT services |
|
|
Engagement |
b_07.01.0120 Identification of alternative ICT TPP |
Identification of alternative ICT TPP |
|
|
Engagement |
b_07.01.0080 Existence of an exit plan |
Existence of an exit plan |
|
|
Engagement |
b_07.01.0090 Possibility of reintegration of the contracted ICT service |
Possibility of reintegration of the contracted ICT service |
|
|
Contract |
b_02.01.0010 Contractual Arrangement Reference Number |
Contractual Arrangement Reference Number |
These attributes reference an contractual arrangement reference number of the contract being reported on. By optimizing each of these requirements into a single attribute, OneTrust prevents duplication of data entry while still maintaining the integrity of the ROI by pulling in the contractual arrangement reference number value where applicable in the report. |
|
Contract |
b_02.02.0010 Contractual Arrangement Reference Number |
||
|
Contract |
b_02.03.0010 Contractual Arrangement Reference Number |
||
|
Contract |
b_02.03.0020 Contractual arrangement linked to the contractual arrangement referred in RT.02.03.0010 |
||
|
Contract |
b_03.01.0010 Contractual arrangement reference number |
||
|
Contract |
b_03.02.0010 Contractual arrangement reference number |
||
|
Contract |
b_03.03.0010 Contractual arrangement reference number |
||
|
Contract |
b_04.01.0010 Contractual arrangement reference number |
||
|
Contract |
b_05.02.0010 Contractual arrangement reference number |
||
|
Contract |
b_07.01.0010 Contractual arrangement reference number |
||
|
Contract |
b_02.01.0020 Type of contractual arrangement |
Type of contractual arrangement |
|
|
Contract |
b_02.01.0050 Annual expense or estimated cost of the contractual arrangement for the past year |
Annual expense or estimated cost of the contractual arrangement for the past year |
|
|
Contract |
b_02.01.0040 Currency of the amount reported for annual expense or estimated cost of contractual arrangement for the past year |
Currency of the amount reported for annual expense or estimated cost of contractual arrangement for the past year |
|
|
Contract |
b_02.02.0070 Start date of the contractual arrangement |
Start date of the contractual arrangement |
|
|
Contract |
b_02.02.0080 End date of the contractual arrangement |
End date of the contractual arrangement |
|
|
Contract |
b_02.01.0030 Overarching contractual arrangement reference number |
Overarching contractual arrangement reference number |
|
|
Contract |
b_02.02.0120 Country of the governing law of the contractual arrangement |
Country of the governing law of the contractual arrangement |
|
|
Contract |
b_02.02.0090 Reason of the termination or ending of the contractual arrangement |
Reason of the termination or ending of the contractual arrangement |
|
|
Contract |
(OT created) Is this contract an intergroup arrangement? |
Is this contract an intergroup arrangement? |