Products Coverage Library Evals FAQ About Contact us Log In Get access

Digital operational Resilience Act (DORA)

Preamble
Recitals 106
Chapter I - General provisions (Article 1-4) 4
Chapter II - ICT risk management (Article 5-16) 12
Chapter III - ICT-related incident management, classification and reporting (Article 17-23) 7
Chapter IV - Digital operational resilience testing (Article 24-27) 4
Chapter V - Managing of ICT third-party risk (Article 28-44) 17
Chapter VI - Information-sharing arrangements (Article 45) 1
Chapter VII - Competent authorities (Article 46-56) 11
Chapter VIII - Delegated acts (Article 57) 1
Chapter IX - Transitional and final provisions (Article 58-64) 7

ICT-related incident

Defined in Article 3, Digital operational Resilience Act (DORA)

Definitions over time (1)

16/01/2023 – today applies on 11/11/2026 Article 3, Digital operational Resilience Act (DORA) Scope: Whole act

For the purposes of this Regulation, the following definitions shall apply:

‘ICT-related incident’ means a single event or a series of linked events unplanned by the financial entity that compromises the security of the network and information systems, and have an adverse impact on the availability, authenticity, integrity or confidentiality of data, or on the services provided by the financial entity;

Used in (106 places in 36 provisions on 11/11/2026)

Digital operational Resilience Act (DORA) (106 in 36)

Recital 10 · Recital 12 · Recital 16 · Recital 21² · Recital 22 · Recital 24⁴ · Recital 32² · Recital 43² · Recital 49 · Recital 51² · Recital 52⁴ · Recital 53 · Recital 55² · Recital 99 · Recital 100² · Article 1² · Article 3⁶ · Article 5² · Article 6⁴ · Article 10⁴ · Article 11³ · Article 12 · Article 13⁸ · Article 14² · Article 15 · Article 16² · Article 17¹¹ · Article 18¹¹ · Article 19¹⁰ · Article 20³ · Article 21² · Article 22³ · Article 24 · Article 33 · Article 37 · Article 49