ICT risk

Defined in Article 3, Digital operational Resilience Act (DORA)

Definitions over time (1)

1. 16/01/2023 – today applies on 11/11/2026 Article 3, Digital operational Resilience Act (DORA) Scope: Whole act

   For the purposes of this Regulation, the following definitions shall apply:

   ‘ICT risk’ means any reasonably identifiable circumstance in relation to the use of network and information systems which, if materialised, may compromise the security of the network and information systems, of any technology dependent tool or process, of operations and processes, or of the provision of services by producing adverse effects in the digital or physical environment;

Used in (145 places in 60 provisions on 11/11/2026)

Digital operational Resilience Act (DORA) (145 in 60)

Recital 1 · Recital 4² · Recital 5 · Recital 7 · Recital 8 · Recital 9 · Recital 10² · Recital 12⁶ · Recital 13 · Recital 14 · Recital 16 · Recital 19 · Recital 21⁴ · Recital 22 · Recital 26 · Recital 29² · Recital 31 · Recital 32² · Recital 34 · Recital 36 · Recital 38² · Recital 42³ · Recital 43⁶ · Recital 45⁴ · Recital 46 · Recital 47³ · Recital 61² · Recital 63 · Recital 66 · Recital 78 · Recital 83 · Recital 86 · Recital 88 · Recital 89 · Recital 95 · Recital 99 · Recital 101 · Recital 102² · Article 3² · Article 4 · Article 5⁶ · Article 6²⁰ · Article 7 · Article 8⁴ · Article 9³ · Article 11³ · Article 12 · Article 13⁵ · Article 14³ · Article 15² · Article 16¹¹ · Article 24² · Article 26 · Article 28⁵ · Article 31² · Article 32 · Article 33³ · Article 44 · Article 60 · Article 61²