Compliance · DORA
DORA: know your information assets, and prove what happened.
DORA has applied to EU financial entities since 17 January 2025. It asks for ICT risk management, data protection and incident reporting. GuardStance supports these requirements with technical controls.
Book a demoWhich articles does GuardStance support?
| Requirement | What it asks | How GuardStance supports it |
|---|---|---|
| Art. 8 | Identify and classify ICT-supported functions, and the information and ICT assets behind them. | Discovery and classification show which information assets are sensitive and where they sit. |
| Art. 9 | Protect data at rest, in use and in transit, and prevent breaches of confidentiality and data loss. | One policy enforces protection across endpoints, email, web, cloud, and AI: monitor, warn, record, or block. |
| Art. 10 | Have mechanisms to promptly detect anomalous activities. | Behavior baselines and risk scores flag unusual file activity. |
| Art. 17 | Define an ICT-related incident management process, and record incidents. | Cases with timelines and evidence support your process. |
| Art. 19 | Report major ICT-related incidents to the competent authority. | Case timelines show what moved, when and where, to support the report. |
GuardStance supports these requirements with technical controls. This is not legal advice; confirm legal questions with your counsel.