Focus 1
ICT risk management
Articles 5-15 cover governance, risk controls, protection, detection, and recovery.
DORA applies to EU financial entities and their ICT third-party providers, including cloud, SaaS, data analytics, and security vendors.
EU baseline
If you are established in the EU, operate in the EU, or place this product or service on the EU market, treat this as a first-order compliance check. Non-EU reach language means outsiders can also be covered, not that EU companies are outside scope.
Review scopeFocus 1
Articles 5-15 cover governance, risk controls, protection, detection, and recovery.
Focus 2
Articles 17-23 cover ICT-related incident classification and reporting.
Focus 3
Articles 24-27 cover testing and threat-led penetration testing.
Focus 4
Articles 28-44 cover provider oversight and contractual controls.
Focus 5
CSSF circulars are tracked for Luxembourg financial entities.
Open related pageThe Pacific Fishery Management Council (Pacific Council) will hold an online meeting of its Ad Hoc Highly Migratory Species (HMS) Fisheries Innovation Workgroup (FIW) to discuss procedures...
The Government Accountability Office Personnel Appeals Board (PAB or Board) proposes several significant changes to its existing regulations to streamline and modernize case processing...
The Federal Emergency Management Agency (FEMA), as part of its continuing effort to reduce paperwork and respondent burden, invites the general public to take this opportunity to comment on...
The Coast Guard proposes to change the operating schedule that governs the Union Pacific Railroad (UPRR) drawbridge that crosses the San Bernard River, mile 20.7, near Brazoria, TX.
The U.S.
The Office of Surface Mining Reclamation and Enforcement (OSM), is approving, in part, two amendments to the Ohio regulatory program (the Ohio program) under the Surface Mining Control and...
The Federal Communications Commission (Commission or FCC) issues a Third Further Notice of Proposed Rulemaking seeking comment on a broad set of additional measures to strengthen the...
The Centers for Disease Control and Prevention (CDC), as part of its continuing effort to reduce public burden and maximize the utility of government information, invites the general public...