Latest Evidence

Description

Calculations

Metadata

Last Seen:
Control Owner:
Control Approver:

Relationships

Tags

Entity Scope

SystemXXX SystemXXX SystemXXX SystemXXX SystemXXX SystemXXX

Description

Calculations

Metadata

Last Seen
Control Type
Control Owner
Control Approver
Target State
Baseline State
Monitored

Events (Past 7 Days)

    Relationships

    Evidence Picker

    Evidence

    Risk Score

    Org Chart

    Metadata

    Tags

    Timeline

    Discovered By

    Data Source Last Seen By Data Source State Trend

    Evidence

    DORA: Digital Operational Resilience Act

    DORA


    The Digital Operational Resilience Act (DORA) establishes a harmonized regulation for managing ICT risk, resilience, and regulatory compliance across the EU financial sector. It mandates financial entities to implement robust ICT risk management, incident detection and reporting, resilience testing, and third-party risk management, while encouraging cyber threat intelligence sharing.

    DORA enforces Real-time and Continuous Monitoring, incident classification, regulatory reporting, third-party oversight, and resilience testing to ensure financial stability and operational continuity against cyber threats and ICT disruptions. The DORA dashboard provides a centralized view of compliance status, incident metrics, testing results, third-party risk exposure, and regulatory reporting to support proactive risk management and regulatory adherence.

    DORA Implementation Summary

    EMEA/EU DORA

    DORA Overview

    EMEA/EU DORA

    EMEA/EU DORA

    94.74%

    Status

    OK: 83.33%

    Degraded: 16.67%

    Failed: 0%

    Tags & Metadata

    Group Metrics

    Last processed

    9:14 AM on 28-02-2025

    Item Type

    Group

    Monitored State

    Monitored

    Approver

    Owain Rowley

    DORA Adoption Status

    Showcasing the status of the adopted DORA Chapters - the bullet chart displays the current score's percentage relative to the target and indicates whether it exceeds or falls short with a clear +/- direction.

    DORA Adoption Trend

    Trend of DORA adoption over a month's duration.

    Chapter I: General Provisions
    ES



    This chapter establishes the scope, applicability, and foundational principles of DORA, ensuring entities and ICT third-party providers adopt a uniform approach to digital operational resilience.

    EMEA/EU DORA/C1-General

    100%

    4 0 0

    0-44

    %

    45-74

    %

    75-100

    %

    Jan 29 Feb 28

    No Avg Change

    DORA - Chapter I

    Chapter II: ICT Risk Management
    ES



    This chapter mandates entities to establish, implement, and maintain an effective ICT risk management framework, ensuring operational resilience against cyber threats and ICT disruptions

    EMEA/EU DORA/C2-ICTRiskMgmt

    92.88%

    9 3 0

    0-44

    %

    45-74

    %

    75-100

    %

    Jan 29 Feb 28

    Avg Decrease of -3%

    DORA - Chapter II

    Chapter III: ICT-related Incident Management, Classification and Reporting
    ES


    This chapter establishes requirements for entities to detect, classify, and report ICT-related incidents, ensuring timely response and regulatory compliance.

    EMEA/EU DORA/C3-ICTIncMgmt

    99.05%

    7 0 0

    0-44

    %

    45-74

    %

    75-100

    %

    Jan 29 Feb 28

    No Avg Change

    DORA - Chapter III

    Chapter IV: Digital Operational Resilience Testing
    ES



    This chapter mandates entities to regularly test their ICT security and resilience through risk-based digital operational resilience testing, ensuring preparedness against cyber threats and operational disruptions.

    EMEA/EU DORA/C4-OpRes

    82.29%

    2 2 0

    0-44

    %

    45-74

    %

    75-100

    %

    Jan 29 Feb 28

    No Avg Change

    DORA - Chapter IV

    Chapter V: Managing of ICT Third-Party Risk
    ES



    This chapter establishes a comprehensive framework for entities to identify, assess, monitor, and mitigate ICT third-party risks, ensuring resilience in outsourced ICT services.

    EMEA/EU DORA/C5-3rdParty

    98.69%

    17 0 0

    0-44

    %

    45-74

    %

    75-100

    %

    Jan 29 Feb 28

    No Avg Change

    DORA - Chapter V

    Chapter VI: Information-Sharing Arrangements
    ES


    This chapter promotes voluntary cyber threat intelligence sharing among entities to enhance collective digital resilience, while ensuring security, confidentiality, and compliance with data protection laws.

    EMEA/EU DORA/C6-Sharing

    98.06%

    1 0 0

    0-44

    %

    45-74

    %

    75-100

    %

    Jan 29 Feb 28

    No Avg Change

    DORA - Chapter VI

    DORA

    97%C1-GeneralC2-ICTRiskMgmtC3-ICTIncMgmtC4-OpResC5-3rdPartyC6-Sharing
    1