Skip to content
CyberDORA
FREN
Direct access

My obligations

Already know your regulatory status? Select the profile that matches your organisation directly to access its obligations.

FULL REGIME
Large financial entity
Bank, insurer, investment firm or other Article 2 entity exceeding the proportionality thresholds.

View my obligations →

SIMPLIFIED REGIME
Small entity / proportionate regime
Micro-enterprise, small non-interconnected investment firm, or small institution for occupational retirement provision.

View my obligations →

FINANCIAL ENTITY
Crypto-asset service provider
Crypto-asset service provider and token issuer falling under both MiCA and DORA.

View my obligations →

DIRECT OVERSIGHT
Critical ICT third-party provider
Cloud, hosting or ICT service provider designated as “critical” by the European Supervisory Authorities.

View my obligations →

CONTRACTUAL OBLIGATIONS
Non-critical ICT third-party provider
ICT provider not designated as critical, but whose services support important functions of a financial entity.

View my obligations →

OUT OF SCOPE
Out of DORA's scope
An entity not listed in Article 2 of the regulation, or subject to another sectoral cyber regulation.

View my obligations →

Not sure of your status? Take the guided test →