1.   In order to achieve a high common level of digital operational resilience, this Regulation lays down uniform requirements concerning the security of network and information systems supporting the business processes of financial entities as follows: (a) requirements applicable to financial entities in relation to:(i)information and communication technology (ICT) risk management;(ii)reporting of major ICT-related incidents and notifying, on a voluntary basis, significant cyber threats to the competent authorities;(iii)reporting of major operational or security payment-related incidents to the competent authorities by financial entities referred to in Article 2(1), points (a) to (d);(iv)digital operational resilience testing;(v)information and intelligence sharing in relation to cyber threats and vulnerabilities;(vi)measures for the sound … Continue reading Article 1 DORA – Subject matterRead More →