DORA guides

DORA Article 30 checklist

Key points to verify in an ICT vendor contract subject to DORA Article 30.

Article 30 requires a clear service description, security requirements, audit rights, subcontracting rules, incident notifications and exit mechanisms.

Readiness checklist

The grid covers controls expected by financial clients: governance, security, continuity, subcontractors, data location, incident notification and evidence traceability.