DORA: 3 delegated regulations published in the EU Official Journal

classify cyber incidents;

ensure a consistent and effective approach to cybersecurity risk management;

enable financial institutions to properly assess the risks associated with the use of external services concerning the use of Information and Communication Technology services supporting critical or important functions.