> ## Documentation Index
> Fetch the complete documentation index at: https://rootea.es/llms.txt
> Use this file to discover all available pages before exploring further.

# DORA (Reglamento UE 2022/2554)

> Digital Operational Resilience Act.

# DORA (Reglamento UE 2022/2554)

<p className="glossary-answer">Digital Operational Resilience Act.</p>

**Categoría:** [Frameworks & Estándares](/glosario)

🎯 **Concepto** — Digital Operational Resilience Act. Regula
resiliencia operacional digital del **sector financiero**
(bancos, aseguradoras, ESI, criptoactivos). Aplicable desde
**17-ene-2025**.

🔗 **Pilares** — Gestión riesgos ICT, reporting incidentes,
testing operacional (incluye **TLPT** — threat-led pen testing
obligatorio para entidades críticas), gestión riesgo terceros
(cloud providers).

⚖️ **Sanciones** — Sanciones administrativas + acciones civiles

* supervisión directa de proveedores ICT críticos por la
  European Supervisory Authorities.

🛡️ **Compliance** — TLPT cada 3 años para tier 1 entities, ICT
risk assessment continuo, cláusulas contractuales DORA en
contratos cloud.

***

← [Volver al glosario completo](/glosario)

<script type="application/ld+json">
  {`{"@context":"https://schema.org","@type":"DefinedTerm","name":"DORA (Reglamento UE 2022/2554)","description":"Digital Operational Resilience Act.","inDefinedTermSet":{"@type":"DefinedTermSet","name":"Glosario táctico de pentesting","url":"https://rootea.es/glosario"},"url":"https://rootea.es/glosario/dora-reglamento-ue-2022-2554"}`}
</script>

<script type="application/ld+json">
  {`{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Inicio","item":"https://rootea.es"},{"@type":"ListItem","position":2,"name":"Glosario táctico","item":"https://rootea.es/glosario"},{"@type":"ListItem","position":3,"name":"DORA (Reglamento UE 2022/2554)","item":"https://rootea.es/glosario/dora-reglamento-ue-2022-2554"}]}`}
</script>

*Última actualización: 2026-06-11*