Tidal Control incident
DORA explained: what does the regulation mean for your organisation?
Resolved on June 15, 2026.
DORA (EU 2022/2554) became fully applicable on 17 January 2025 and requires financial entities and critical ICT service providers in the EU to manage ICT risk across five pillars: ICT risk management, incident reporting, resilience testing, third-party risk management, and information sharing. Around twenty categories of financial entity are in scope, including payment institutions holding AISP or PISP licences under PSD2. No DORA certification exists; compliance is assessed by the competent national supervisor through policies, procedures, test results, and register data.
Update timeline
- resolved Jun 15, 2026, 12:00 PM UTC
DORA (EU 2022/2554) became fully applicable on 17 January 2025 and requires financial entities and critical ICT service providers in the EU to manage ICT risk across five pillars: ICT risk management, incident reporting, resilience testing, third-party risk management, and information sharing. Around twenty categories of financial entity are in scope, including payment institutions holding AISP or PISP licences under PSD2. No DORA certification exists; compliance is assessed by the competent national supervisor through policies, procedures, test results, and register data.
Your product runs on more than Tidal Control
Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.
Amazon Web Services