Skip to main content
All glossary terms

Regulation & risk

DORA (Digital Operational Resilience Act)

The Digital Operational Resilience Act (DORA) is a European Union regulation focused on digital operational resilience in the financial sector. It addresses how covered financial entities manage information and communication technology risk and related third-party dependencies.

Also known as DORA, Digital Operational Resilience Act, DORA Regulation. Both DORA labels refer to the same regulation in this glossary.

Why it matters in practice

DORA is relevant to resilience programs that consider technology services, disruptions, and oversight in financial operations. Its scope and duties depend on the organization and legal text, so a term entry is not a coverage analysis. In this glossary, “DORA Regulation” is treated as a synonym for this same act.

Example

A financial technology team inventories a critical service dependency and sends its resilience review to the owner responsible for the organization’s DORA assessment.

Educational note

This definition is general information, not legal advice. It may omit facts that matter to a specific situation and does not establish or guarantee compliance.