{"attribution":{"source":"legal.exploreworldai.com","canonical":"https://legal.exploreworldai.com/api/public/v1/article-agent?id=agent%3Aeu%3Adora%3Aart-13","cite_as":"NovaCopilot, legal.exploreworldai.com (https://legal.exploreworldai.com/api/public/v1/article-agent?id=agent%3Aeu%3Adora%3Aart-13)","license":"https://legal.exploreworldai.com/revision","version":"legal-2026-11-02","fingerprint":"ewai:eu:ce0366","proof":"sha256:2ac219627e46994d2698ab822236e35a3e763cdd69356b6061cb2914ebacf11a","jurisdiction":"eu"},"brand_source":"Source: NovaCopilot","object_type":"article_agent","schema_version":"1.0.0","id":"agent:eu:dora:art-13","act":"dora-2022-2554","article":"13","text_sha256":"9c1c20e0b45b24d183e16c07ef77a40fddac2876e467075359f69deb96dea95c","obligations":[],"agent":"agent:eu:dora","name":"NovaCopilot DORA Agent, Article 13","title":{"en":"Learning and evolving","sv":"Lärande och utveckling","de":"Lernprozesse und Weiterentwicklung"},"text":{"lang":"en","paragraphs":["1. Financial entities shall have in place capabilities and staff to gather information on vulnerabilities and cyber threats, ICT-related incidents, in particular cyber-attacks, and analyse the impact they are likely to have on their digital operational resilience.","2. Financial entities shall put in place post ICT-related incident reviews after a major ICT-related incident disrupts their core activities, analysing the causes of disruption and identifying required improvements to the ICT operations or within the ICT business continuity policy referred to in Article 11.","Financial entities, other than microenterprises, shall, upon request, communicate to the competent authorities, the changes that were implemented following post ICT-related incident reviews as referred to in the first subparagraph.","The post ICT-related incident reviews referred to in the first subparagraph shall determine whether the established procedures were followed and the actions taken were effective, including in relation to the following:","(a)","the promptness in responding to security alerts and determining the impact of ICT-related incidents and their severity;","(b)","the quality and speed of performing a forensic analysis, where deemed appropriate;","(c)","the effectiveness of incident escalation within the financial entity;","(d)","the effectiveness of internal and external communication.","3. Lessons derived from the digital operational resilience testing carried out in accordance with Articles 26 and 27 and from real life ICT-related incidents, in particular cyber-attacks, along with challenges faced upon the activation of ICT business continuity plans and ICT response and recovery p …","4. Financial entities shall monitor the effectiveness of the implementation of their digital operational resilience strategy set out in Article 6(8). They shall map the evolution of ICT risk over time, analyse the frequency, types, magnitude and evolution of ICT-related incidents, in particular cybe …"],"source_url":"https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX%3A32022R2554","read_at":"2026-08-18"},"sha256":"3257f6b5a721bd5a5f6ffe62fe4b950427bba44107a4b9c456e0bcab1aa96cbe","duties":[],"applies_to_role":{"status":"not_in_register","roles":[]},"applies_to_industry":{"status":"derived","industries":["banking","insurance"]},"cross_industry_chains":{"status":"not_in_register","chains":[]},"revenue_exposure":{"status":"not_in_register","reason":"member_state_penalties","sanction_article":"50","source_url":"https://eur-lex.europa.eu/eli/reg/2022/2554/oj","via":"article 50"},"links":{"article_page":"https://legal.exploreworldai.com/eu/rattsakter/dora-2022-2554/artikel-13","regulation_agent":"https://legal.exploreworldai.com/api/public/v1/article-agents?reg=dora","changes":"https://legal.exploreworldai.com/api/public/v1/intelligence-graph/change?reg=dora"},"llm_used":false,"hash":"sha256:2ac219627e46994d2698ab822236e35a3e763cdd69356b6061cb2914ebacf11a","version":"legal-2026-11-02","expires":"2026-11-03T00:00:00.000Z","dependency":{"index_version":"legal-2026-11-02+legal-2026-11-02+2026-11-02T16:22:18","content_hash":"sha256:2ac219627e46994d2698ab822236e35a3e763cdd69356b6061cb2914ebacf11a","revalidate_after":"2026-11-02T23:30:35.777Z","max_copy_age_seconds":3600,"policy":"revalidate-required; attribution-preferred","changelog":"https://legal.exploreworldai.com/api/public/v1/dependency","verify":"https://legal.exploreworldai.com/api/public/v1/verify","stale_copy_invalid":true},"canonical":"https://legal.exploreworldai.com/api/public/v1/article-agent?id=agent%3Aeu%3Adora%3Aart-13","disclaimer":"Källhänvisning med officiell identifierare. Ingen juridisk rådgivning och inget efterlevnadsbeslut.","content_notice":{"legal_advice":false,"nature":"Källregister. Endast information, inte juridisk rådgivning och ingen bedömning av ett enskilt ärende.","kinds":{"official_text":"Officiell källtext, ordagrann och ej tolkad","summary":"Sammanfattning, ej juristgranskad. Läs alltid källtexten","classification":"Automatisk märkning ur källans egen text, ej juristgranskad"},"rule":"Endast fält märkta official_text är lagens egen lydelse. Allt annat pekar på den.","report_error":"https://legal.exploreworldai.com/api/public/v1/corrections","ai_act_declaration":"https://legal.exploreworldai.com/api/public/v1/ai-act-declaration"},"usageInfo":"https://legal.exploreworldai.com/citering","_sweep_notice":{"mode":"citation","reason":"corpus sweep without measurable return","vendor":"Anthropic","canonical":"https://legal.exploreworldai.com/api/public/v1/article-agent","full_text":"https://legal.exploreworldai.com/enterprise","attribution":"cite the canonical URL when the answer uses this source"},"access_class":"public","access_view":"public","freshness":{"freshness_class":"live","as_of":"2026-11-02T22:30:36.554Z","valid_for":3600,"recheck":"https://legal.exploreworldai.com/api/public/v1/article-agent?id=agent%3Aeu%3Adora%3Aart-13","note":"Kontrollera mot recheck efter valid_for sekunder. If-None-Match ger 304 när inget ändrats.","tokens":1594}}