INTERACTIVE ASSESSMENT TOOL

DORA
Scope Assessment

Determine whether your entity falls within the scope of Regulation (EU) 2022/2554 on digital operational resilience for the financial sector

Regulation 17 January 2025
Applies from 17 January 2025
Entity types 21 categories

Scope Assessment

Determine if your entity falls within DORA scope based on 21 entity types across 7 financial sectors, including credit institutions, investment firms, insurers, and ICT providers.

Framework Tier

Find out whether you fall under the full, simplified (Art. 16), or ICT third-party provider framework, with specific handling for microenterprises.

Obligations & Deadlines

Get a complete overview of the 6 pillars: ICT risk management, incident reporting, digital operational resilience testing, third-party risk, information sharing, and governance.

TLPT & NIS2

Assess your threat-led penetration testing (TLPT) likelihood and understand the NIS2 lex specialis interaction across 5 areas defined in DORA.

DORA Scope Assessment