Focus 1
ICT risk management
Articles 5-15 cover governance, risk controls, protection, detection, and recovery.
Framework hub
DORA
DORA applies to EU financial entities and their ICT third-party providers, including cloud, SaaS, data analytics, and security vendors.
EU baseline
If you are established in the EU, operate in the EU, or place this product or service on the EU market, treat this as a first-order compliance check. Non-EU reach language means outsiders can also be covered, not that EU companies are outside scope.
Review scopeFocus 2
Incident reporting
Articles 17-23 cover ICT-related incident classification and reporting.
Focus 3
Resilience testing
Articles 24-27 cover testing and threat-led penetration testing.
Focus 4
Third-party ICT risk
Articles 28-44 cover provider oversight and contractual controls.
Focus 5
Luxembourg CSSF layer
CSSF circulars are tracked for Luxembourg financial entities.
Open related pageSource updates
MEDIUMFederal Register2026-10-07
Pacific Fishery Management Council; Public Meeting
The Pacific Fishery Management Council (Pacific Council) will hold a meeting of its Ad Hoc Highly Migratory Species (HMS) Fisheries Innovation Workgroup (FIW).
US federal regulationDORA
HIGHFederal Register2026-10-07
Purchaser Credit on Timber Sale Contracts
The United States Department of Agriculture, Forest Service (Forest Service or Agency) is making purely technical, clarifying amendments to its existing regulations relating to timber...
US federal regulationDORA
MEDIUMFederal Register2026-10-07
Revision of ACS-26 Rate Schedules; Public Hearing and Opportunities for Public Review and Comment
Bonneville is holding an expedited rate proceeding pursuant to Section 7(i) of the Pacific Northwest Electric Power Planning and Conservation Act (Northwest Power Act) to propose revisions...
US federal regulationDORA
HIGHFederal Register2026-10-07
Statements of General Policy or Interpretation Not Directly Related to Regulations; Withdrawal of Proposed Rule
The Department of Labor (Department) is withdrawing its notice of proposed rulemaking (NPRM) published on July 2, 2025 (90 FR 28985), which proposed to remove parts located in Title 29,...
US federal regulationDORA
HIGHFederal Register2026-10-07
Agency Information Collection Activities; New Information Collection: Hours of Service of Drivers; Pilot Program To Allow Commercial Drivers To Split Sleeper Berth Time
In accordance with the Paperwork Reduction Act of 1995, the Federal Motor Carrier Safety Administration (FMCSA) announces its plan to submit the Information Collection Request (ICR)...
US federal regulationDORA
LOWFederal Register2026-10-07
Privacy Act of 1974; Implementation
In the Notice section of today's Federal Register, the Office of the Pardon Attorney (PARDON), a component within the United States Department of Justice (DOJ or Department), has published...
US federal regulationDORAAustralian Privacy Act
MEDIUMFederal Register2026-10-07
Senior Executive Service Performance Board
The Office of Special Counsel (OSC) publishes the names of the members selected to serve on its Senior Executive Service (SES) Performance Review Board (PRB).
US federal regulationDORA
HIGHESMA2026-10-07
ESMA clarifies access for EU market participants to the services of third-country CSDs
The European Securities and Markets Authority (ESMA), the EU regulator and supervisor, has published today a statement clarifying that EU market participants should not be prevented from...
DORAMiCA