EIOPA · DORA038 - 2991
Other DORA topics
- Regulation
- (EU) 2022/2554 - Digital Operational Resilience Act (DORA)
- Article
- 12
- Topic
- Other DORA topics
- Submitted
- 2024-02-14
- Answered
- 2025-11-20
Question
Art. 12 III DORA: When restoring backup data using own systems, financial entities shall use ICT systems that are physically and logically segregated from the source ICT system. What does DORA mean by "recovering backed-up data using own systems"? What does "own systems" mean? What is the source ICT system? The productive system whose data is backed-up or the system where the backed-up data is stored?
Answer
The terms “own systems” and “source ICT systems” are not defined in DORA. However, in order to understand the policy intention behind Article 12(3) of DORA, the provisions should be understood as restoring the backup data by using ICT systems for which the financial entity has full control and responsibility. When the financial entity restores the backup data, it shall use ICT systems that are not directly connected with the main one and that are securely protected from any unauthorized access or ICT corruption.
This Q&A is published by European Insurance and Occupational Pensions Authority and is non-binding. It does not constitute legal advice. Updated weekly from official ESA sources.
Similar Q&As
More Q&As on this topic
📋 Track EU financial regulation continuously
Forseti monitors EU financial regulation and delivers personalised alerts anchored to verified official sources.
14-day free trial. No credit card required.