# Digital Operational Resilience Act (DORA)

> EU

DORA mandates comprehensive operational resilience for EU financial entities and their ICT providers. We assist with gap analysis, risk management frameworks, incident reporting mechanisms, and digital operational resilience testing (including Threat-Led Penetration Testing).

## Who needs to comply

EU financial entities and critical ICT third-party service providers serving them.

## Key requirements

- **ICT Risk Management** - Establish robust frameworks to withstand, respond to, and recover from ICT disruptions.
- **Resilience Testing** - Mandatory advanced security testing, including red teaming (TLPT).
- **Third-Party Risk** - Rigorous oversight of supply chains and ICT service providers.

---
Related services: https://a5cyber.in/services/risk-assessment/, https://a5cyber.in/services/red-team/, https://a5cyber.in/services/incident-response/