Glossary

DORA

Digital Operational Resilience Act

Digital Operational Resilience Act, Regulation (EU) 2022/2554. It sets ICT risk management, incident reporting, resilience testing and ICT third-party risk rules for EU financial entities, including contract terms and a register of information for their ICT providers, and applies from 17 January 2025.

Defined in: Regulation (EU) 2022/2554, the Digital Operational Resilience Act

Covered in

Guide

NIS2 and DORA for software suppliers: what reaches you and the evidence to keep

Work out whether NIS2 applies to your software company directly or only through customers, what Article 21 risk-management measures and DORA's ICT third-party rules ask of suppliers, and how to keep one assurance pack and register data sheet for both.