Self-Assessment
DORA Readiness Assessment
Answer 20 questions to gauge your institution's preparedness across all 5 DORA pillars. No data is stored.
Pillar 1 of 5
ICT Risk Management Framework
1.Has your management body formally approved an ICT risk management framework that defines risk tolerance levels, assigns named individuals to ICT risk oversight roles, and mandates periodic reviews at least annually?
Art. 52.Do you maintain a complete inventory of all ICT assets (applications, databases, infrastructure, third-party services) with each asset classified by criticality, data sensitivity, and mapped to the business functions it supports?
Art. 83.Are ICT business continuity plans and disaster recovery procedures tested at least annually through structured exercises, with measured RTO and RPO results compared against defined targets for all critical or important functions?
Art. 114.Do you have documented ICT security policies covering access control (least-privilege), encryption standards, patch management timelines, and change management procedures — all reviewed and updated at least annually?
Art. 9