Skip to content
ESEN
Contact

Glossary · Finance and compliance

DORADigital Operational Resilience Act

DORA is the European regulation on digital operational resilience, which requires financial entities to manage technology risk, report major incidents, test their systems and oversee their technology providers.

DORA: the details

It is Regulation (EU) 2022/2554 and has applied since January 17, 2025 to banks, insurers, payment institutions, investment firms and other players in the financial sector. It rests on five areas: ICT risk management, incident management and reporting, resilience testing, third-party risk and information sharing.

It also reaches, indirectly, whoever provides them with technology services. The entity must keep a register of its providers, and contracts have to include specific clauses: service levels, data location, audit rights and an exit plan. For a software provider, working with a financial entity means being able to document all of that.

DORA in a project

When the client is subject to DORA we account for it from the scope onward: where data is hosted, which third parties are involved, how each access is logged and how the system is handed over so another team can operate it.

On this site

Where we apply it

All services

Glossary

Related terms

See the whole glossary

Get started

Does this come up in your project?

Tell us which system you have and what is still done by hand. We’ll tell you where we would start and whether it fits.

Tell us about your project info@veodar.com

Before you write, see how we price a project or our solutions by department.

Fig. 07Morse keyH · E · L · L · O