DORA

Assess your compliance with the Digital Operational Resilience Act (DORA).

Presentation

The Digital Operational Resilience Act (DORA) is a European regulation strengthening the digital operational resilience of the financial sector. It establishes uniform requirements for ICT risk management, incident reporting, resilience testing and third-party risk.

What does DORA require?

• ICT risk management framework: documented and approved by management
• Incident reporting: classification and notification to authorities
• Resilience testing: TLPT (Threat-Led Penetration Testing)
• Third-party risk: oversight of critical ICT service providers
• Information sharing: threat intelligence exchange

Who is affected?

Financial entities (banks, insurers, investment firms, payment institutions) and their critical ICT third-party service providers.

DORA: Self-Assessment

Assess your compliance with DORA — digital operational resilience for the financial sector.

ICT Risk Management Framework Governance and Business Continuity Incident Detection and Notification Operational Resilience Testing Third-Party and ICT Outsourcing Risk Information Sharing and Supervision

Previous Next

Result

–

Overall maturity level

domains answered

Help / Why this question?

Reset everything Print report

Contact us for DORA compliance