Products Coverage Library Evals FAQ About Contact us Log In Get access

Digital operational Resilience Act (DORA)

Preamble
Recitals 106
Chapter I - General provisions (Article 1-4) 4
Chapter II - ICT risk management (Article 5-16) 12
Chapter III - ICT-related incident management, classification and reporting (Article 17-23) 7
Chapter IV - Digital operational resilience testing (Article 24-27) 4
Chapter V - Managing of ICT third-party risk (Article 28-44) 17
Chapter VI - Information-sharing arrangements (Article 45) 1
Chapter VII - Competent authorities (Article 46-56) 11
Chapter VIII - Delegated acts (Article 57) 1
Chapter IX - Transitional and final provisions (Article 58-64) 7

ICT services

Defined in Article 3, Digital operational Resilience Act (DORA)

Definitions over time (1)

16/01/2023 – today applies on 12/11/2026 Article 3, Digital operational Resilience Act (DORA) Scope: Whole act

For the purposes of this Regulation, the following definitions shall apply:

‘ICT services’ means digital and data services provided through ICT systems to one or more internal or external users on an ongoing basis, including hardware as a service and hardware services which includes the provision of technical support via software or firmware updates by the hardware provider, excluding traditional analogue telephone services;

Used in (105 places in 37 provisions on 12/11/2026)

Digital operational Resilience Act (DORA) (105 in 37)

Recital 20 · Recital 27 · Recital 28 · Recital 31³ · Recital 35² · Recital 43 · Recital 62 · Recital 63³ · Recital 65 · Recital 68 · Recital 71 · Recital 72² · Recital 73 · Recital 74⁴ · Recital 76² · Recital 78³ · Recital 79³ · Recital 81 · Recital 82 · Recital 83² · Recital 98 · Recital 100 · Article 3⁵ · Article 5⁴ · Article 11 · Article 25 · Article 26³ · Article 28²¹ · Article 29⁷ · Article 30¹¹ · Article 31⁴ · Article 33³ · Article 35³ · Article 36 · Article 38 · Article 39 · Article 40²