AnnexOps

DORA Exposure Analyzer

The Digital Operational Resilience Act, Regulation (EU) 2022/2554 (DORA), sets ICT risk-management, incident-reporting, resilience-testing and third-party-risk duties for EU financial entities. Find out which regime likely applies to you, the duties and reporting clocks that follow, and your readiness gaps. This is an indicative self-assessment, not legal advice. Some outcomes depend on decisions by your Member State or competent authority.