Back to DORA Maturity Index

Major Incidents Linked to CIFs

Are major incidents tracked in ServiceNow with links to CIFs and regulatory reporting obligations?

Key Takeaways

  • Around half of organizations track major ICT incidents in ServiceNow with links to Critical or Important Functions (CIFs) and regulatory reporting obligations.
  • A significant portion do not yet link major incidents to CIFs, limiting traceability and regulatory reporting readiness.
  • The findings suggest that while many organizations have established incident-to-CIF traceability, broader adoption is needed to strengthen DORA compliance and end-to-end incident governance.

Compare your company

Take the DORA Maturity Index survey to compare your organization's incident-to-CIF traceability with benchmark data.

Take the survey