What does "Digital operational resilience" mean under DORA?
The ability of a financial entity to build, assure, and review its operational integrity and reliability by ensuring, either directly or indirectly via third-party ICT services, the full range of ICT-related capabilities needed to safeguard the security of network and information systems.
Last updated: 22 August 2026.
DORA is Regulation (EU) 2022/2554. It has applied since 17 January 2025 to 20 categories of licensed financial entity, from banks to crypto-asset service providers. It requires an ICT risk management framework, major incident reporting within 4 hours of classification, an annual register of ICT contracts, and threat-led penetration testing every three years.
Checked