🎁 Free Download

DORA Compliance Checklist 2026

Your complete 75-control implementation guide covering all 5 pillars. Download your free PDF checklist and start your compliance journey today.

What You'll Get

75 Actionable Controls

Every critical requirement across all 5 DORA pillars broken down into clear, actionable tasks you can implement immediately.

Timeline Priorities

Each item tagged with priority level (High/Medium/Low) and estimated completion time so you know what to tackle first.

Role Assignments

Clear responsibility mapping - know exactly which team (IT, Compliance, Legal, Risk) should own each task.

Documentation Templates

Built-in templates for policies, procedures, and reports required by regulators. Save hundreds of hours.

Progress Tracking

Excel format with automated progress calculations. Track your compliance journey from 0% to 100%.

RTS/ITS References

Every checkpoint linked to specific regulatory technical standards articles for easy audit trail.

Download Your Free Checklist

Join 6,700+ visitors who used our DORA resources in the last 30 days

Built from the Regulation text, article by article

SSL Secure
GDPR Compliant
No Spam

Checklist Preview

1

ICT Risk Management (21 controls)

  • Document all ICT systems and dependencies
  • Establish ICT risk management framework
  • Define risk appetite and tolerance levels
  • Implement continuous monitoring systems
  • Create incident escalation procedures
  • + 16 more controls
2

Incident Management & Reporting (12 controls)

  • Establish incident classification criteria
  • Implement 4-hour initial notification process
  • Create incident reporting templates
  • Set up communication channels with authorities
  • Train staff on incident response procedures
  • + 7 more controls
3

Digital Operational Resilience Testing (13 controls)

  • Develop comprehensive testing program
  • Schedule vulnerability assessments
  • Plan TLPT exercises (if required)
  • Document testing results and remediation
  • Establish testing frequency requirements
  • + 8 more controls
4

ICT Third-Party Risk (16 controls)

  • Create comprehensive ICT provider register
  • Conduct due diligence on critical providers
  • Include DORA-compliant contract clauses
  • Implement continuous monitoring of providers
  • Establish exit strategies for critical services
  • + 11 more controls
5

Information Sharing (5 controls)

  • Join information sharing arrangements
  • Establish threat intelligence protocols
  • Document data sharing procedures
  • Train staff on confidentiality requirements
  • Implement secure communication channels
+

Cross-cutting governance & documentation (8 controls)

  • Annual management body training, recorded
  • Internal audit cycle covering DORA
  • Retention periods for incident and register records
  • Accountability matrix with unambiguous ownership
  • Every YES backed by a retrievable artefact
  • + 3 more controls

Join Thousands of Compliance Professionals

10,247 Downloads This Month
45 Checkpoints
95% Found It Useful
32 Countries Using It

Practitioner tools for DORA compliance teams

Workbooks, playbooks and certifications built for EU financial entities. Add several to your cart: volume discounts apply automatically.

academy-bundle

DORA Certifications Bundle

399 € excl. VAT
academy

DORA for IT & Security Teams

199 € excl. VAT
academy

DORA for ICT Providers & Vendors

199 € excl. VAT
81
certificates issued
51
certified professionals
13
programmes awarded

Browse the full library · Excel toolkits · Certifications

How Compliant Is Your Institution?

Take our free 5-minute assessment and get an instant DORA compliance score with personalised recommendations.

Get Your Free DORA Score Join Free Monthly Webinar