DORA Scope, Proportionality and Timeline
DORA read as one regime: who it covers, how proportionality shapes the work, and why the timeline runs beyond a single application date, explained for financial services.
Line 16: The DORA regime in full
DORA as a whole regime: scope, proportionality, chapters, technical standards, application dates, and how the pieces fit together.
The line guide
Working guides on this line
DORA and NIS2 Boundaries
NIS2 and DORA both concern cybersecurity, but they are different regimes with different scopes. This guide explains the boundary without confusing the two.
DORA and Other EU Laws
DORA does not replace sectoral financial law, data law, or other EU rules. It sits alongside them, and a firm needs a map that shows where each law bites.
DORA Chapters at a Glance
A chapter by chapter map of DORA, showing how ICT risk, incidents, testing, third-party risk, and information sharing connect around one single service.
DORA Common Misunderstandings
Common DORA misunderstandings, from treating it as an IT project to treating application as completion, and what a joined-up service view shows instead.
DORA Implementation Timeline
DORA implementation is a rolling programme, not a single deadline. Readiness, application, standards, testing, and supervision each move on their own rhythm.
DORA Proportionality Principle
Proportionality in DORA calibrates depth and detail to risk, size, and complexity. It does not remove duties, and it never excuses weak treatment of a critical service.
DORA Scope and Financial Entities
Which financial entities DORA names, how ICT third-party providers fit into its picture, and where scope stops, explained through the services a firm provides.
DORA Supervision and Enforcement
Competent authorities supervise DORA, the ESAs coordinate, and critical ICT providers face dedicated oversight. Evidence is judged service by service, not by policy alone.
DORA Technical Standards Explained
Technical standards fill in DORA with templates, classifications, and registers. They are developed by the ESAs and apply on their own stated dates, not all at once.