Products Coverage Library Evals FAQ About Contact us Log In Get access

Digital operational Resilience Act (DORA)

Preamble
Recitals 106
Chapter I - General provisions (Article 1-4) 4
Chapter II - ICT risk management (Article 5-16) 12
Chapter III - ICT-related incident management, classification and reporting (Article 17-23) 7
Chapter IV - Digital operational resilience testing (Article 24-27) 4
Chapter V - Managing of ICT third-party risk (Article 28-44) 17
Chapter VI - Information-sharing arrangements (Article 45) 1
Chapter VII - Competent authorities (Article 46-56) 11
Chapter VIII - Delegated acts (Article 57) 1
Chapter IX - Transitional and final provisions (Article 58-64) 7

critical or important function

Defined in Article 3, Digital operational Resilience Act (DORA)

Definitions over time (1)

16/01/2023 – today applies on 11/11/2026 Article 3, Digital operational Resilience Act (DORA) Scope: Whole act

For the purposes of this Regulation, the following definitions shall apply:

‘critical or important function’ means a function, the disruption of which would materially impair the financial performance of a financial entity, or the soundness or continuity of its services and activities, or the discontinued, defective or failed performance of that function would materially impair the continuing compliance of a financial entity with the conditions and obligations of its authorisation, or with its other obligations under applicable financial services law;

Used in (57 places in 25 provisions on 11/11/2026)

Digital operational Resilience Act (DORA) (57 in 25)

Recital 29 · Recital 59² · Recital 62 · Recital 66 · Recital 70 · Recital 72 · Recital 73 · Article 3³ · Article 5² · Article 8 · Article 9 · Article 11³ · Article 12³ · Article 13 · Article 15 · Article 16² · Article 24 · Article 25 · Article 26⁶ · Article 28⁸ · Article 29⁷ · Article 30⁴ · Article 31 · Article 33 · Article 35³