DORA

DORA Compliance

The Digital Operational Resilience Act (DORA) sets new requirements for financial institutions. AIGOY supports you with ICT risk management, third-party oversight, and documentation of resilience tests.

Check Compliance โ†’

What AIGOY covers for you.

Comprehensive tool support for all relevant requirements.

๐Ÿฆ

ICT Risk Framework

Systematic ICT risk management per DORA Art. 5-16. Identification, assessment, and management of all ICT risks.

๐Ÿ”—

Third-Party Register

Overview of all critical ICT third-party providers. Contract review, exit strategies, and concentration risks.

๐Ÿšจ

Incident Classification

Classification and reporting of ICT incidents. Thresholds, deadlines, and reporting channels per DORA Art. 17-23.

๐Ÿงช

Resilience Testing

Documentation of TLPT and other resilience tests. Test plans, results, and measures tracking.

๐Ÿ“Š

Reporting

Management reports for BaFin and internal stakeholders. Compliance score and progress tracking.

๐Ÿ“‹

Information Sharing

Structured collection of threat intelligence. Sharing with other financial institutions per Art. 45.

Your obligations at a glance.

โœ“ICT Risk Management Framework established
โœ“ICT third-party register created
โœ“Incident classification schema defined
โœ“Reporting obligations documented
โœ“Resilience testing plan created
โœ“Business continuity for ICT defined
โœ“Exit strategies for third-party providers
โœ“Management awareness ensured

Check DORA Readiness

Specifically for financial service providers: gap analysis and measures plan.

Get Started Free โ†’