GRCLibrary.ai

Crosswalk

DORA

Laws and regulations.

Where the corpus maps to DORA: Digital Operational Resilience Act.

Canonical citation

Standard ID
EU DORA
Current version
Regulation 2022/2554
Publication date
2022-12
Topic
Digital Operational Resilience Act (financial-services)
Upstream check location
https://eur-lex.europa.eu/eli/reg/2022/2554/oj (opens in a new tab)
Last verified (UTC)
2026-06-30

Mapped control areas, 5

Control areas from the reverse crosswalk

From the Reverse Framework Control Crosswalk Matrix, which answers: given a control identifier or family, which documents address it.

PillarLibrary documentsAlignment type
Pillar 1 ICT risk managementEnterprise Risk Management Standard, Third-Party and Supply Chain Risk Standard, IT Service Management Framework, Information Security PolicyRegulatory interpretation
Pillar 2 ICT-related incident reportingSecurity Incident Response Procedure, Security Incident Reporting and Escalation Procedure, Data Protection and Privacy Breach Response ProcedureRegulatory interpretation
Pillar 3 Digital operational resilience testingContinuity and Recovery Testing Procedure, Penetration Testing and Red Team Standard, Resilience Metrics and Testing Log RegisterRegulatory interpretation
Pillar 4 ICT third-party riskThird-Party and Supply Chain Risk Standard, Supplier Security and Privacy Assurance Standard, Supplier Due Diligence Procedure, Supplier Ongoing Monitoring Procedure, Supplier Exit and Data Return Procedure, Cloud Exit and Data Portability StandardRegulatory interpretation
Pillar 5 Information and intelligence sharingThreat Intelligence and SIEM Operations ProcedureRegulatory interpretation

Coverage, 6 domains

Coverage by domain

From the Reverse Framework Control Crosswalk Matrix; the main crosswalk table's document counts land here.

Risk, 2 documents

Security, 3 documents

Operations, 2 documents

Supply chain, 5 documents

Resilience, 3 documents

Privacy, 1 document

Corpus citations, 17

Documents naming it in their framework alignment

Generated from each document's framework alignment list in the taxonomy, through the committed alias map.

Note

What this mapping is

From the GRC Library Compliance Alignment Matrix: citations are indicative, not exhaustive (the representative-citation convention), and no entry constitutes a certification, attestation, or legal opinion.

From the Reverse Framework Control Crosswalk Matrix: coverage is partial, and external control identifiers and clause numbers are referenced for navigation only; the library does not reproduce third-party control text.

From the Cross-Framework Alignment Matrix: the alignment is not an official mapping, certification claim, legal opinion, or reproduction of third-party framework content.

The standards, laws, frameworks, and programmes in the canonical citations register, mapped here or not, are listed with their current editions on the Standards & frameworks page, generated from that register.