Framework library · European Union

DORA

DORA — Digital Operational Resilience Act. Published by European Parliament & Council / ESAs (EBA, ESMA, EIOPA), version Regulation (EU) 2022/2554. Kapālins maps it to 4 controls. 3 of 4 controls are proved by a live signal from the platform, and 1 by the assessment.

Read the source document

Controls mapped
DORA-ICTRMICT risk management frameworkLive signal
DORA-INCIDENTICT incident classification & reportingLive signal
DORA-TESTINGDigital operational resilience testingLive signal
DORA-TPRMICT third-party risk managementAssessment

Live signal: a signal from the gateway, probes or device sensor proves it continuously. Assessment: it is evidenced by answers to the assessment. Both are exported in the regulator evidence pack.

History

How DORA got here.

  1. Proposed

    The Commission proposed the Digital Operational Resilience Act in its Digital Finance Package. European Commission

  2. Adopted

    Regulation (EU) 2022/2554 adopted; published in the Official Journal on 27 December 2022. EUR-Lex

  3. In force

    DORA entered into force. EUR-Lex

  4. In force

    DORA began to apply to EU financial entities. EUR-Lex

See this framework on your estateAll 29 frameworks