Free Readiness Check · No Signup

What does your DORA work already cover?

The EBA opened a consultation on 26 August 2026 on draft RTS for the operational risk management framework under CRR3. Article 2 of the draft lets institutions rely on arrangements already established under DORA. Eight questions to see how much of yours qualifies.

~3 minutes 8 questions Instant result No signup

This is a draft standard. EBA/CP/2026/18 is a consultation paper, open for responses until 31 December 2026, with a virtual public hearing on 29 September 2026. It is not in force and it carries no application date. This check is an educational aid, not a compliance assessment.

Question 1 of 8

Which describes your entity?

The draft RTS applies to institutions subject to Regulation (EU) No 575/2013, on an individual and, where applicable, consolidated basis.

Question 2 of 8

Where does your business indicator sit?

The business indicator is calculated under Article 314 CRR. EUR 750 million is the line the draft uses for almost all of its proportionality.

Question 3 of 8

Are your DORA framework documents approved, dated and owned?

Article 5 of the draft asks for author, version number, approving body and dates. Article 2 only lets you rely on arrangements you can produce.

Question 4 of 8

Do ICT-related incidents reach your operational risk event register with a loss amount?

Recital 5 of the draft asks for ICT-related incidents in the scope of operational risk to be treated as operational risk events, drawing on what DORA already produces.

Question 5 of 8

Do you record incidents and near misses that caused no loss?

Article 9(2)(b) asks for them, along with boundary cases where operational risk contributes to losses booked under another risk type.

Question 6 of 8

Do you have a governed operational risk taxonomy?

Article 9(5) and 9(6) ask for a taxonomy with defined minimum elements, named ownership and change control, applied consistently.

Question 7 of 8

Do you collect operational risk losses below EUR 20,000?

The draft asks for them where they are relevant, with the criteria for relevance written into your own internal documents and procedures.

Question 8 of 8

Is there a reconciliation between the accounting records and the loss data set?

Article 15(3) lists reconciliation between accounting data on operational risk losses and the loss data set among the minimum data quality controls.

Please answer every question for an accurate read.

Reusable under Article 2

    No DORA equivalent

      Indicative only. This tool reads a draft standard published for consultation on 26 August 2026 (EBA/CP/2026/18). It is an educational aid, not legal advice, not a supervisory assessment, and not a statement of any obligation in force. The text may change before adoption. Figures and article references come from the consultation paper and from Regulation (EU) No 575/2013.

      Your next step

      Free tools that pick up where this one stops.

      Free guideThe 16 consultation questionsWhat each one asks, and which four decide what this costs you.Open the toolPillar 2Classify an ICT-related incidentThe classification that has to reach the operational risk event register.Open the toolMeasureRun a full DORA gap analysisFive pillars measured, so you know what carries over under Article 2.Open the tool
      Keep your results

      Email me my results + the DORA action checklist

      We will send your results and the 75-control DORA compliance checklist to your work inbox. Unsubscribe anytime.

      Practitioner tools for DORA compliance teams

      Workbooks, playbooks and certifications built for EU financial entities. Add several to your cart: volume discounts apply automatically.

      academy-bundle

      DORA Certifications Bundle

      399 € excl. VAT
      academy

      DORA for IT & Security Teams

      199 € excl. VAT
      academy

      DORA for ICT Providers & Vendors

      199 € excl. VAT
      141
      certificates issued
      84
      certified professionals
      21
      programmes awarded

      Browse the full library · Excel toolkits · Certifications

      How Compliant Is Your Institution?

      Take our free 5-minute assessment and get an instant DORA compliance score with personalised recommendations.

      Get Your Free DORA Score Join Free Monthly Webinar