The Digital Operational Resilience Act applies to EU financial entities — banks, insurers, investment firms, payment and crypto providers — and their critical ICT vendors. It mandates an ICT risk-management framework, classification and reporting of ICT incidents, digital resilience testing (up to threat-led penetration testing for significant entities), management of ICT third-party risk including a Register of Information, and contractual provisions with ICT providers. Digital operational resilience for EU financial entities — ICT risk, incident reporting, resilience testing, and third-party registers.
All frameworks · NIS2 · ISO 27001:2022 · ISO 22301:2019 · CSA CCM v4
Features · Integrations · Pricing · Frameworks · Consultants · About · Blog