EIOPA · DORA 227 - 3315

Digital operational resilience testing (DORA)

Regulation
(EU) 2022/2554 - Digital Operational Resilience Act (DORA)
Article
27 and 28
Topic
Digital operational resilience testing (DORA)
Submitted
2025-04-07
Answered
2025-11-21
More Q&As on this regulation →

Question

In articles 27 and 28 DORA it is stated that a TLPT test must take place if we are a critical supplier. According to the DORA legislation itself, you assign whether we are critical or not. Because I cannot find where and how this should be requested from you, I will do it this way.

Background

With some customers we want to make separate agreements if we are a critical supplier. Whether we are actually considered critical is unclear to some.

Answer

This question has been rejected because it is unclear.
View original on European Insurance and Occupational Pensions Authority ↗

This Q&A is published by European Insurance and Occupational Pensions Authority and is non-binding. It does not constitute legal advice. Updated weekly from official ESA sources.

Similar Q&As

Digital operational resilience testing (DORA)

Answered 2025-08-08

Digital operational resilience testing (DORA), Other DORA topics

Answered 2025-11-20

Digital operational resilience testing (DORA)

Answered 2025-11-20

Digital operational resilience testing (DORA), ICT risk management (DORA)

Answered 2025-11-21

ICT third-party risk management (DORA), Other DORA topics

Answered 2025-07-25

More Q&As on this topic

Digital operational resilience testing (DORA)

Answered 2025-11-20

Digital operational resilience testing (DORA)

Answered 2025-11-20

Digital operational resilience testing (DORA)

Answered 2025-08-08

📋 Track EU financial regulation continuously

Forseti monitors EU financial regulation and delivers personalised alerts anchored to verified official sources.

Start free trial → Learn more

14-day free trial. No credit card required.