DORA sets EU-wide ICT and operational-resilience rules for financial entities. Answer a few questions to see whether it applies to you, which of the five pillars you must implement, and how proportionality changes things for smaller firms.
Indicative guidance only, based on the Digital Operational Resilience Act (Regulation (EU) 2022/2554) and its RTS/ITS. Not legal advice; no advisory relationship is created. Whether a specific entity is in scope — and any micro-enterprise or critical-ICT-third-party-provider treatment — needs a tailored review.
