Zum Inhalt springen
Resilience Platform Resilience Platform
DE | EN
📬 🔍 Sollmaßnahmenkatalog

DORA

DORA Article Navigator

Vollständige Übersicht aller 64 DORA-Artikel mit Coverage-Status, verknüpften Routen und Sollmaßnahmen.

Hinweis: Die Coverage-Bewertung zeigt, welche Artikel durch Inhalte, Tools oder Maßnahmen auf der Resilience Platform abgedeckt sind.
77 Artikel · 9 Titel Vollständig Teilweise Minimal

Title I

4 Artikel (Art. 1–4)

Art. Bezeichnung Coverage Maßnahmen Verknüpfte Seiten
1 Subject matter, scope and definitions — → dora.overview → dora.regulated-activities
2 Definitions — → dora.glossar
3 Scope — Financial entities — → dora.regulated-activities
4 Scope — Exemptions — → dora.regulated-activities

Title II

18 Artikel (Art. 5–12)

Art. Bezeichnung Coverage Maßnahmen Verknüpfte Seiten
5 Governance and organisation GOV-01 bis GOV-04 → dora.ict-risk-management → dora.ict-policies
6 ICT risk management framework IRM-01 bis IRM-04 → dora.ict-risk-management
7 Identification IRM-05 bis IRM-08 → dora.ict-risk-management → dora.critical-functions
8 Protection and prevention PDR-01 bis PDR-04 → dora.ict-risk-management → dora.protection-assessment
9 Protection and prevention PDR-01 bis PDR-04 → dora.ict-risk-management → dora.protection-assessment
10 Detection PDR-02 → dora.ict-risk-management → produkte.dora-detection-capability-workspace
11 Response and recovery PDR-03, PDR-04 → dora.ict-risk-management → playbooks.index
11 Business continuity management IRM-09 bis IRM-12 → bcm.index
12 Backup and restoration IRM-13, IRM-14 → bcm.index
13 ICT assets, processes and dependencies REG-01 bis REG-04 → dora.information-register → produkte.informationsregister-readiness-2026
14 ICT risk management reporting GOV-03 → dora.ict-risk-management
15 ICT risk management documentation GOV-04 → dora.documentation-requirements
16 ICT risk management review — → dora.maturity
7 ICT assets, processes and dependencies — detailed asset inventory REG-01 bis REG-08 → dora.information-register → dora.info-register-2026 → dora.information-register-export
8 Protection and prevention — cryptographic controls, network security PDR-05 bis PDR-10 → dora.ict-risk-management → dora.protection-assessment → cryptography.index
10 Detection — anomaly detection, SIEM, monitoring DET-01 bis DET-06 → dora.ict-risk-management → produkte.dora-detection-capability-workspace → siem-analysis
11 BCM and disaster recovery — crisis management, crisis communication BCM-01 bis BCM-10 → bcm.index → bcm.crisis-management → bcm.testing → bcm.bia
12 Backup and restoration — RTO/RPO, off-site backups BCM-11 bis BCM-14 → bcm.index → bcm.bia → ict-risk-management.nachweise

Title III

8 Artikel (Art. 17–23)

Art. Bezeichnung Coverage Maßnahmen Verknüpfte Seiten
17 ICT incident classification INC-01, INC-02 → dora.ict-incidents → dora.incident-reporting-wizard → dora.ict-incidents-db
18 Major ICT incident reporting INC-03 → dora.ict-incidents → dora.incident-reporting-wizard → dora.notification-obligations
19 Voluntary notification — → dora.incident-reporting-wizard → dora.notification-obligations
20 Coordination of incident reporting — → dora.ict-incidents → dora.incident-reporting-wizard
21 Central contact point — → dora.central-contact-point → dora.incident-reporting-wizard → dora.ict-incidents-db
22 Incident response documentation INC-04 → dora.incident-reporting-wizard → dora.documentation-requirements
23 Incident response review — → dora.incident-reporting-wizard → dora.maturity
23 Incident response review — post-incident review, lessons learned — → dora.incident-reporting-wizard → playbooks.index → playbooks.ikt-triage

Title IV

4 Artikel (Art. 24–27)

Art. Bezeichnung Coverage Maßnahmen Verknüpfte Seiten
24 Digital operational resilience testing programme TST-01 bis TST-04 → dora.resilience-testing → dora.testing-cockpit → dora.testprogramm → produkte.dora-resilience-testing-cockpit
25 Testing of ICT tools and systems TST-05 → dora.resilience-testing → dora.test-types
26 TLPT — Threat-Led Penetration Testing TST-06 → dora.tlpt → produkte.dora-resilience-testing-cockpit
27 TLPT — Testing requirements — → dora.tlpt

Title V

6 Artikel (Art. 28–30)

Art. Bezeichnung Coverage Maßnahmen Verknüpfte Seiten
28 ICT third-party risk management TPR-01 bis TPR-05, DORA-EXT-01, DORA-EXT-02 → dora.ict-third-party-risk → dora.information-register → produkte.dora-exit-portability-workspace → produkte.dora-exit-board-approval-pack
29 Key contractual provisions CON-01 bis CON-06 → dora.ict-contracts
30 Critical ICT third-party providers KWF-01 bis KWF-06, TPR-CTPP-01 → dora.critical-ict-third-party-providers → dora.critical-functions
28 ICT third-party risk management — full lifecycle, concentration risk TPR-01 bis TPR-10 → dora.ict-third-party-risk → dora.information-register → supplier-concentration
29 Key contractual provisions — contractual clauses template CON-01 bis CON-08 → dora.ict-contracts → third-party-risk.contract-requirements
30 Critical ICT third-party providers — CTPP designation, assessments CTPP-01 bis CTPP-06 → dora.critical-ict-third-party-providers → dora.ctpp-oversight → produkte.dora-exit-portability-workspace

Title VI

3 Artikel (Art. 31–33)

Art. Bezeichnung Coverage Maßnahmen Verknüpfte Seiten
31 Information sharing arrangements — → dora.information-sharing
32 Information sharing — Operational — → dora.information-sharing
33 Information sharing — Data protection — → dora.information-sharing

Title VII

12 Artikel (Art. 34–42)

Art. Bezeichnung Coverage Maßnahmen Verknüpfte Seiten
34 Designation of critical ICT third-party providers — → dora.critical-ict-third-party-providers → dora.ctpp-oversight
35 Oversight framework — → dora.ctpp-oversight
36 Oversight powers of the Lead Overseer — → dora.ctpp-oversight
37 Cooperation between ESAs and competent authorities — → dora.title-viii
38 Investigative powers — → dora.ctpp-oversight
39 On-site inspections — → dora.ctpp-oversight
40 Hearings — → dora.title-viii
41 Regular oversight fees — → dora.title-viii
42 Enforcement of oversight measures — → dora.ctpp-oversight → dora.title-viii
34 Designation of CTPP — oversight designation process — → dora.critical-ict-third-party-providers → dora.ctpp-oversight
35 Oversight framework — Lead Overseer powers — → dora.ctpp-oversight
42 Enforcement of oversight measures — penalties for CTPP — → dora.ctpp-oversight → dora.title-viii

Title VIII

12 Artikel (Art. 43–54)

Art. Bezeichnung Coverage Maßnahmen Verknüpfte Seiten
43 Competent authorities — → dora.title-viii
44 Professional secrecy — → dora.title-viii
45 Administrative sanctions — → dora.title-viii
46 Penalties for natural persons — → dora.title-viii
47 Reporting of infringements — → dora.title-viii
48 Exercise of delegation — → dora.title-viii
49 Implementation and review — → dora.timeline → dora.title-viii
50 ESAs review and report — → dora.title-viii
51 Transitional provisions — → dora.timeline → dora.title-viii
52 Amendments to regulations — → dora.title-viii
53 Entry into force — → dora.timeline → dora.title-viii
54 Addresses — → dora.title-viii

Title IX

10 Artikel (Art. 55–64)

Art. Bezeichnung Coverage Maßnahmen Verknüpfte Seiten
55 Exercise of delegation — Commission delegated acts — → dora.title-viii
56 Committee procedure — comitology — → dora.title-viii
57 ESAs review and report timeline — → dora.timeline → dora.title-viii
58 Transitional provisions — phasing — → dora.timeline → dora.title-viii
59 Amendments to Regulation (EU) No 600/2014 — → dora.title-viii
60 Amendments to Regulation (EU) No 596/2014 — → dora.title-viii
61 Amendments to Regulation (EU) No 909/2014 — → dora.title-viii
62 Amendments to Regulation (EU) No 2015/2365 — → dora.title-viii
63 Amendments to Regulation (EU) No 2016/1011 — → dora.title-viii
64 Entry into force and application date — → dora.timeline → dora.title-viii

Coverage-Zusammenfassung

38

Vollständig

27

Teilweise

12

Minimal