Clateway Insights platform · Nederlands
DORA compliance for financial entities
The Digital Operational Resilience Act (DORA) applies to banks, insurers, investment firms, payment institutions and their critical ICT providers since January 2025. Clateway Insights supports the five DORA pillars in one platform.
Request access to Clateway Insights
The five DORA pillars in Clateway
- ICT risk management: risk register, policies and controls generated and tracked
- ICT-related incident management and reporting: tickets, major incidents and SLAs
- Digital operational resilience testing: plans, findings and evidence
- ICT third-party risk: vendor registry, contract lifecycle, exit plans and fourth parties
- Information sharing: threat intelligence and vendor security advisories
Frequently asked questions
When did DORA apply?
DORA has applied since 17 January 2025 to financial entities in the EU and to the ICT third-party service providers that serve them.
What is the DORA register of information?
A register of all contractual arrangements with ICT third-party service providers, which financial entities must maintain and provide to their competent authority.
Related insights
- Approach and architecture of GenAI and Enterprise data
- Regulation as Architecture - DORA, NIS2, and the EU AI Act
Compare vendors
- Compliance Management vendors
- Financial Planning and Analysis vendors
- Predictive Analytics vendors
- Regulatory Compliance Software vendors
Key terms explained
- What is DORA (Digital Operational Resilience Act)?
- What is third-party risk management (TPRM)?
- What is Fourth-party risk?
Related solutions
- Vendor and third-party risk management – Third-party risk management: vendor registry, risk scoring, breach history, adverse media monitoring, fourth parties, contract lifecycle and renewal alerts.
- GRC and compliance software with AI – AI-powered GRC software: generate ISO 27001, NIS2, DORA and GDPR policies, run your Statement of Applicability, controls, audit findings and management review…
- NIS2 compliance and readiness – Get NIS2 compliant: readiness assessment, AI-generated NIS2 policies, risk register, supplier security, incident management and board reporting in one platform.