Overview
The Digital Operational Resilience Act (DORA), officially Regulation (EU) 2022/2554 is a European Union regulation. It requires financial entities to improve their digital operational resilience.
Aim
DORA aims to improve the digital operational resilience of financial entities in the EU and their ICT suppliers and create a uniform regulatory framework across the EU, in order to reduce the susceptibility to cyber threats across the entire value chain of the financial sector. In addition, DORA intends to harmonize national regulations regarding the security of IT systems in the financial sector, thus strengthening the European financial market as a whole against cyber risks and information and communications technology incidents.
1 source for this section
Proportionality principle
Article 4 defines the proportionality principle, resulting in some exceptions for smaller enterprises which fall within the scope of the regulation despite their size. This allows for a simplified implementation of certain requirements in accordance with the overall risk profile of the enterprise. An example for this is the simplified ICT risk management framework according to Article 16 in combination with a regulatory technical standard (RTS).
1 source for this section
Impact
DORA will have an impact on pension schemes. Pension schemes having more than 15 but fewer than 100 members will be subject to a simplified ICT risk management framework.
The source notesEvidence & further reading3 sources
- Digital Operational Resilience Act — Wikipedia, revision 1322898768 Wikipedia contributors · Reference source · accessed 2026-09-22
- Rodenburg-Luitse, Willemijn (2023-01-25). "EU neemt met Dora baanbrekende it-wetgeving aan". Computable.nl (in Dutch). Retrieved 2024-05-21. computable.nl · Reference source · link imported 2026-09-22
- "Exploring DORA's Impact on Pension Schemes". Mason Hayes Curran. Retrieved 12 December 2024. mhc.ie · Reference source · link imported 2026-09-22
Selected and reformatted from Digital Operational Resilience Act, by its contributors, under CC BY-SA 4.0. Revision 1322898768. Sections and formatting have been shortened; the linked revision provides the full context and contributor history. This reference text remains under the same license. Its additional citation links are imported from that revision and have not been independently checked here.