Latest Articles
DORA guides and compliance resources
In-depth articles covering every aspect of DORA implementation for regulated EU financial institutions.
How to Build a DORA-Compliant ICT Risk Framework
A practical guide for compliance and ICT teams navigating Articles 6–16. Covers the five core components, common gaps, and how to demonstrate compliance to regulators.
Read article →DORA Incident Reporting: The 4-Hour, 72-Hour and 30-Day Deadlines Explained
When a major ICT incident occurs, regulated entities face three strict reporting deadlines. This guide explains each stage, classification criteria, and how to build an operational process.
Read article →What Is TLPT Under DORA? A Complete Guide for Financial Entities
Threat-Led Penetration Testing is required for significant financial entities under DORA Article 26. Learn what TLPT involves, who must conduct it, and how to manage a three-phase programme.
Read article →