Products Coverage Library Evals FAQ About Contact us Log In Get access

Digital operational Resilience Act (DORA)

Preamble
Recitals 106
Chapter I - General provisions (Article 1-4) 4
Chapter II - ICT risk management (Article 5-16) 12
Chapter III - ICT-related incident management, classification and reporting (Article 17-23) 7
Chapter IV - Digital operational resilience testing (Article 24-27) 4
Chapter V - Managing of ICT third-party risk (Article 28-44) 17
Chapter VI - Information-sharing arrangements (Article 45) 1
Chapter VII - Competent authorities (Article 46-56) 11
Chapter VIII - Delegated acts (Article 57) 1
Chapter IX - Transitional and final provisions (Article 58-64) 7

major ICT-related incident

Defined in Article 3, Digital operational Resilience Act (DORA)

Definitions over time (1)

16/01/2023 – today applies on 12/11/2026 Article 3, Digital operational Resilience Act (DORA) Scope: Whole act

For the purposes of this Regulation, the following definitions shall apply:

‘major ICT-related incident’ means an ICT-related incident that has a high adverse impact on the network and information systems that support critical or important functions of the financial entity;

Used in (44 places in 22 provisions on 12/11/2026)

Digital operational Resilience Act (DORA) (44 in 22)

Recital 21 · Recital 43 · Recital 51 · Recital 52⁴ · Recital 53 · Recital 55 · Recital 99 · Recital 100² · Article 1² · Article 3² · Article 5² · Article 6² · Article 11 · Article 13 · Article 14 · Article 16 · Article 17² · Article 18³ · Article 19¹⁰ · Article 20² · Article 21 · Article 22²