DORA

Assess your compliance with the Digital Operational Resilience Act (DORA).

Presentation

The Digital Operational Resilience Act (DORA) is a European regulation strengthening the digital operational resilience of the financial sector. It establishes uniform requirements for ICT risk management, incident reporting, resilience testing and third-party risk.

What does DORA require?

• ICT risk management framework: documented and approved by management
• Incident reporting: classification and notification to authorities
• Resilience testing: TLPT (Threat-Led Penetration Testing)
• Third-party risk: oversight of critical ICT service providers
• Information sharing: threat intelligence exchange

Who is affected?

Financial entities (banks, insurers, investment firms, payment institutions) and their critical ICT third-party service providers.

DORA: Self-Assessment

Assess your compliance with DORA — digital operational resilience for the financial sector.

ICT Risk Management Framework Governance and Business Continuity Incident Detection and Notification Operational Resilience Testing Third-Party and ICT Outsourcing Risk Information Sharing and Supervision

Previous Next

Self-assessment report

Your organisation's IT security maturity

Free online diagnostic run with G-Echo

Overall maturity level –

Issued on :

Did this report help you see things more clearly? Let's talk: a free call with a G-Echo expert

G-Echo — https://g-echo.fr/

Result

–

Overall maturity level

domains answered

Help / Why this question?

Annex A — Prioritized action plan

This plan prioritizes measures per domain according to the observed maturity level (P1: low maturity, P2: average, P3: good). Efforts are expressed in man-days, for guidance only.

These efforts and budgets are indicative (standard ranges) and neither a quote nor a formal risk analysis.

Reset everything Download PDF report

Partners

Sovereign & secure cloud: Akilao by SWiiptel

Migrate your infrastructure to SWiiptel's (SWIIPTEL SAS) 100% French cloud platform — 24/7 monitoring, Toulouse ↔ Paris datacenters. Four migration plans accompany the move, with no application rework:

1Identical migration

VM backed up nightly, full elasticity, no application changes.

2Shared security

High-availability shared firewall, dedicated internal IP zone, supervised perimeter.

3Dedicated security

Dedicated firewall + dedicated WAN IP, internal IP zone, VLAN of your choice.

4High availability

2 dedicated firewalls in failover, 3 external IPs including 1 kept (CARP), multi-datacenter Toulouse ↔ Paris.

Shared secure foundation: nginx reverse proxy in front, dedicated VPN, managed certificates and ticket-based support.

Discover Akilao offers

G-Echo

Contact G-Echo

Cybersecurity audit, consulting and expertise (EBIOS Risk Manager, ISO 27001).

Address6 Avenue de la Gare, C24, 31380 Garidech, France

Phone+33.9.856.002.40

Emailcontact@g-echo.fr

Websiteg-echo.fr

Monday to Friday, 9am-6pm

Talk to an expert

G-Echo — https://g-echo.fr/

Contact us for DORA compliance