# Dora - Digital Operational Resilience Act

At a high level, one is a framework produced by the National Institute of Standards and Technologies (the NIST CSF), while DORA is a piece of EU legislation intended to manage technology and cyber security risks within the European banking sector

* ICT Risk Management and Governance.
* Incident Response and Reporting.
* Digital Operational Resilience Testing.
* Third-Party Risk Management.
* Information & Intelligence Sharing Arrangements.

[https://www.oracle.com/a/ocom/docs/contract-checklist-dora.pdf](https://www.oracle.com/a/ocom/docs/contract-checklist-dora.pdf)

{% embed url="https://www.oracle.com/a/ocom/docs/contract-checklist-dora.pdf" %}
