Chapter IVDigital operational resilience testing
- Article 24General requirements for the performance of digital operational resilience testing
1. For the purpose of assessing preparedness for handling ICT-related incidents, of identifying weaknesses, deficiencies and gaps in digital operational resilience, and of promptly implementing corrective measures, financial…
- Article 25Testing of ICT tools and systems
1. The digital operational resilience testing programme referred to in Article 24 shall provide, in accordance with the criteria set out in Article 4(2), for the execution of…
- Article 26Advanced testing of ICT tools, systems and processes based on TLPT
1. Financial entities, other than entities referred to in Article 16(1), first subparagraph, and other than microenterprises, which are identified in accordance with paragraph 8, third subparagraph, of…
- Article 27Requirements for testers for the carrying out of TLPT
1. Financial entities shall only use testers for the carrying out of TLPT, that: (a) are of the highest suitability and reputability; (b) possess technical and organisational capabilities…
https://dora.digiphile.law/chapter/chapter-IV.html
Text as at 2 November 2026.
This is an unofficial convenience version of the EU Digital Operational Resilience Act (Regulation (EU) 2022/2554). It is presented “as is” without guarantee of accuracy, completeness or reliability. See the source text for the official version. This site was last updated in November 2026.