European Union ·Regulation

Regulation (EU) 2022/2554 on digital operational resilience for the financial sector (DORA)

In force · 14 December 2022

Summary

DORA harmonises ICT risk-management rules for banks, insurers, investment firms and other financial entities. It requires an ICT risk-management framework, reporting of major incidents, resilience testing including threat-led penetration testing, and management of third-party risk. It also introduces EU-level oversight of critical ICT third-party providers such as cloud services.

Original title

Regulation (EU) 2022/2554 on digital operational resilience for the financial sector (DORA)

Title in other languages

• Regolamento (UE) 2022/2554 relativo alla resilienza operativa digitale per il settore finanziario (DORA)
• Règlement (UE) 2022/2554 sur la résilience opérationnelle numérique du secteur financier (DORA)
• Reglamento (UE) 2022/2554 sobre la resiliencia operativa digital del sector financiero (DORA)

Jurisdiction

European Union

Issuing body

European Parliament and Council of the European Union

Official number

Regulation (EU) 2022/2554

Type

Regulation

Date adopted

14 December 2022

Entry into force

16 January 2023

Status

In force

Available languages

English, Italian (official translation), French (official translation), Spanish (official translation), German (official translation)

Topics

• Financial sector
• Incident management / CSIRT
• Supply chain

Licence / terms of use

EU reuse (Decision 2011/833/EU)

Notes

Si applica dal 17 gennaio 2025.

Collected from

manuale

Last verified

26 October 2026 (verified by Claude (seed iniziale, da revisionare in redazione))

European Parliament and Council of the European Union. (2022). Regulation (EU) 2022/2554 on digital operational resilience for the financial sector (DORA) (Regulation (EU) 2022/2554). https://eur-lex.europa.eu/eli/reg/2022/2554/oj

European Parliament and Council of the European Union. "Regulation (EU) 2022/2554 on digital operational resilience for the financial sector (DORA)." 14 December 2022. https://eur-lex.europa.eu/eli/reg/2022/2554/oj.

@misc{eu_dora_2022_2554,
  author       = {{European Parliament and Council of the European Union}},
  title        = {{Regulation (EU) 2022/2554 on digital operational resilience for the financial sector (DORA)}},
  year         = {2022},
  note         = {Regulation (EU) 2022/2554},
  url          = {https://eur-lex.europa.eu/eli/reg/2022/2554/oj},
  urldate      = {2026-10-26}
}

Report an error in this record