Glossary
DORA
The EU regulation setting information and communication technology risk requirements for financial entities, including crypto-asset service providers.
DORA covers ICT risk management, incident reporting, resilience testing and — the part most firms underestimate — a register of every third-party ICT provider with contractual terms that meet its requirements.
It applies alongside MiCA rather than instead of it, so an authorisation project that plans only for MiCA has understated its own scope.
Where this comes up
See also
Need this applied to your situation?
Definitions only get you so far. Tell us where you are established, where your customers are and what you hold.