{ "attribution": { "source": "legal.exploreworldai.com", "canonical": "https://legal.exploreworldai.com/api/public/v1/obj/action_kit/eu:dora--art-5", "cite_as": "NovaCopilot, legal.exploreworldai.com (https://legal.exploreworldai.com/api/public/v1/obj/action_kit/eu:dora--art-5)", "license": "https://legal.exploreworldai.com/revision", "version": "legal-2026-10-06", "fingerprint": "ewai:se:5e9acf", "proof": "sha256:bc2c9398753bb27850bee91dd86c700db852c702b2e8557c4977bc2b89001ef0", "jurisdiction": "se", "lang": "en", "publisher": "NovaCopilot by ExploreWorld Legal", "terms": "https://legal.exploreworldai.com/om" }, "brand_source": "Source: NovaCopilot", "brand": { "product": "NovaCopilot", "platform": "ExploreWorldAI", "infrastructure": "ExploreWorld Legal", "infrastructure_url": "legal.exploreworldai.com", "legal_entity": "Valkiv Ventures AB", "permanent_url": "https://legal.exploreworldai.com/novacopilot", "source": "Source: NovaCopilot", "powered_by": "Powered by NovaCopilot", "license": "https://legal.exploreworldai.com/licensvillkor", "contact": "stig@valkiv.com" }, "object_type": "action_kit", "object_id": "action_kit:eu:dora--art-5", "schema_version": "1", "schema": "https://legal.exploreworldai.com/api/public/v1/schemas/action_kit", "url": "https://legal.exploreworldai.com/api/public/v1/obj/action_kit/eu:dora--art-5", "judgment": { "id": "eu:dora--art-5", "text": "https://legal.exploreworldai.com/api/public/v1/judgment-text?id=eu:dora--art-5" }, "siblings": { "risk": "https://legal.exploreworldai.com/api/public/v1/obj/risk/eu:dora--art-5", "relation": "https://legal.exploreworldai.com/api/public/v1/obj/relation/eu:dora--art-5", "change": "https://legal.exploreworldai.com/api/public/v1/obj/change/eu:dora--art-5", "agent": "https://legal.exploreworldai.com/api/public/v1/obj/agent/eu:dora--art-5", "provenance": "https://legal.exploreworldai.com/api/public/v1/obj/provenance/eu:dora--art-5", "status": "https://legal.exploreworldai.com/api/public/v1/obj/status/eu:dora--art-5", "precedent": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:dora--art-5", "edge": "https://legal.exploreworldai.com/api/public/v1/obj/edge/eu:dora--art-5", "element": "https://legal.exploreworldai.com/api/public/v1/obj/element/eu:dora--art-5", "decision": "https://legal.exploreworldai.com/api/public/v1/obj/decision/eu:dora--art-5", "obligation": "https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:dora--art-5", "sanction": "https://legal.exploreworldai.com/api/public/v1/obj/sanction/eu:dora--art-5", "weight": "https://legal.exploreworldai.com/api/public/v1/obj/weight/eu:dora--art-5", "conflict": "https://legal.exploreworldai.com/api/public/v1/obj/conflict/eu:dora--art-5", "outcome": "https://legal.exploreworldai.com/api/public/v1/obj/outcome/eu:dora--art-5", "provision_link": "https://legal.exploreworldai.com/api/public/v1/obj/provision_link/eu:dora--art-5", "brief": "https://legal.exploreworldai.com/api/public/v1/obj/brief/eu:dora--art-5", "citation_graph": "https://legal.exploreworldai.com/api/public/v1/obj/citation_graph/eu:dora--art-5", "outcome_pattern": "https://legal.exploreworldai.com/api/public/v1/obj/outcome_pattern/eu:dora--art-5", "risk_chain": "https://legal.exploreworldai.com/api/public/v1/obj/risk_chain/eu:dora--art-5", "compliance_effect": "https://legal.exploreworldai.com/api/public/v1/obj/compliance_effect/eu:dora--art-5", "answer_node": "https://legal.exploreworldai.com/api/public/v1/obj/answer_node/eu:dora--art-5", "exception": "https://legal.exploreworldai.com/api/public/v1/obj/exception/eu:dora--art-5", "timeline": "https://legal.exploreworldai.com/api/public/v1/obj/timeline/eu:dora--art-5", "package": "https://legal.exploreworldai.com/api/public/v1/obj/package/eu:dora--art-5", "case_kit": "https://legal.exploreworldai.com/api/public/v1/obj/case_kit/eu:dora--art-5", "documentation_requirement": "https://legal.exploreworldai.com/api/public/v1/obj/documentation_requirement/eu:dora--art-5", "sme_kit": "https://legal.exploreworldai.com/api/public/v1/obj/sme_kit/eu:dora--art-5" }, "source": "NovaCopilot", "precedent_graph": "https://legal.exploreworldai.com/api/public/v1/precedent-graph/eu:dora--art-5", "item": { "coverage": { "complete": 5, "total": 5, "label": "5 of 5 answers ready" }, "subject": "eu:dora--art-5", "act": "dora", "article": "5", "actions": [ { "obligation": "obligation:eu:dora-art-5-financial-entity", "verification": "governance", "sanctions": [ "sanction:eu:dora-art-35-6", "sanction:eu:dora-art-50" ] } ], "answers": [ { "key": "what_to_do", "status": "ready", "sha256": "f39d5bd5690b3acf6b042042ae29cb75edc964a24bbe1435ba4e3cf128e0f821" }, { "key": "who", "status": "ready", "sha256": "b9420606b9a90f87d009e2483c00a63e24f2105625a1ed753ff4861e0b5e8975" }, { "key": "verification", "status": "ready", "sha256": "a238775a31adcfc1fbd8467c47fb87ddf48a117ccc598df30598afb8e0293102" }, { "key": "documents", "status": "ready", "sha256": "ee7da2d018c4cb3a8c617cd4b5c2789d1c93d5bdb503851e933907880c824a02" }, { "key": "if_not_met", "status": "ready", "sha256": "1880a9bd9f3667b3a27494a003ad775ee37a542c13c931cbe0babc10df4ad7f6" } ], "answers_full": [ { "key": "what_to_do", "status": "ready", "answer": "The management body defines, approves and oversees the ICT risk management framework and bears ultimate responsibility for it.", "ids": [ "obligation:eu:dora-art-5-financial-entity" ], "question": "What must I do?", "sha256": "f39d5bd5690b3acf6b042042ae29cb75edc964a24bbe1435ba4e3cf128e0f821" }, { "key": "who", "status": "ready", "answer": "Responsible roles: financial-entity.", "ids": [ "obligation:eu:dora-art-5-financial-entity" ], "question": "Who is responsible?", "sha256": "b9420606b9a90f87d009e2483c00a63e24f2105625a1ed753ff4861e0b5e8975" }, { "key": "verification", "status": "ready", "answer": "Verified by: governance. Board-approved document with named owner and review date.", "ids": [ "verification:governance" ], "question": "How is this verified?", "sha256": "a238775a31adcfc1fbd8467c47fb87ddf48a117ccc598df30598afb8e0293102" }, { "key": "documents", "status": "ready", "answer": "Keep: Approved policy or plan, Board minutes with approval, Named owner.", "ids": [ "documentation_requirement:eu:dora--art-5" ], "question": "Which documents are required?", "sha256": "ee7da2d018c4cb3a8c617cd4b5c2789d1c93d5bdb503851e933907880c824a02" }, { "key": "if_not_met", "status": "ready", "answer": "2 sanctions, up to 1 % of turnover.", "ids": [ "sanction:eu:dora-art-35-6", "sanction:eu:dora-art-50" ], "question": "What happens if the requirement is not met?", "sha256": "1880a9bd9f3667b3a27494a003ad775ee37a542c13c931cbe0babc10df4ad7f6" } ], "action_list": [ { "obligation": "obligation:eu:dora-art-5-financial-entity", "provision": "dora art. 5", "role": "financial-entity", "action": "The management body defines, approves and oversees the ICT risk management framework and bears ultimate responsibility for it.", "deadline": null, "recipient": null, "verification": "governance", "verification_method": "Board-approved document with named owner and review date.", "evidence": [ "Approved policy or plan", "Board minutes with approval", "Named owner" ], "exceptions": [ "exception:eu:dora-microenterprise" ], "sanctions": [ "sanction:eu:dora-art-35-6", "sanction:eu:dora-art-50" ], "related_rules": [ "obligation:eu:nis2-art-20-management-body", "obligation:eu:amlr-art-9-obliged-entity", "obligation:eu:amlr-art-11-obliged-entity", "obligation:eu:csddd-art-11-company", "obligation:eu:csddd-art-14-company" ], "source_url": "https://eur-lex.europa.eu/eli/reg/2022/2554/oj" } ], "checklist": [ { "step": 1, "role": "financial-entity", "do": "The management body defines, approves and oversees the ICT risk management framework and bears ultimate responsibility for it.", "verify": "Board-approved document with named owner and review date.", "keep": [ "Approved policy or plan", "Board minutes with approval", "Named owner" ], "deadline": null, "if_not": [ "sanction:eu:dora-art-35-6", "sanction:eu:dora-art-50" ], "done": false } ], "links": { "sme_kit": "https://legal.exploreworldai.com/api/public/v1/obj/sme_kit/eu:dora--art-5", "act_kit": "https://legal.exploreworldai.com/api/public/v1/obj/action_kit/eu:dora", "articles": [], "risk": [ "https://legal.exploreworldai.com/api/public/v1/obj/risk_chain/eu:dora--financial-entity" ], "timeline": [ "https://legal.exploreworldai.com/api/public/v1/obj/timeline/eu:dora-art-5-financial-entity" ], "list": "https://legal.exploreworldai.com/api/public/v1/action-kits" }, "method": "Rule to action: five fixed agent questions from deterministic registers. Verification and evidence come from fixed keyword rules on the duty text. No model writes anything.", "attribution": "Source: NovaCopilot", "hash": "1be6e61235dd8822ea1a7d4e6283064b34863f2bbdacbd08d9d7f5e1a6fa5c08" }, "links": { "provisions": "https://legal.exploreworldai.com/api/public/v1/obj/provision_link/eu:dora--art-5", "case_law": { "outcome": "https://legal.exploreworldai.com/api/public/v1/obj/outcome/eu:dora--art-5", "outcome_pattern": "https://legal.exploreworldai.com/api/public/v1/obj/outcome_pattern/eu:dora--art-5" }, "evidence": { "provenance": null, "chain_verify": "https://legal.exploreworldai.com/api/public/v1/changes/verify", "object_changes": "https://legal.exploreworldai.com/api/public/v1/objects/changes" }, "compact": "https://legal.exploreworldai.com/api/public/v1/obj/action_kit/eu:dora--art-5?view=compact", "representations": {}, "machine_languages": [ "en", "sv" ], "ref": "eu:dora--art-5" }, "watch": { "changes": "https://legal.exploreworldai.com/api/public/v1/changes", "whats_new": "https://legal.exploreworldai.com/api/public/v1/whats-new?jurisdiction=eu", "conditional": "Send If-None-Match with the ETag; unchanged objects return 304 without body.", "recheck_after_seconds": 86400 }, "hash": "sha256:bc2c9398753bb27850bee91dd86c700db852c702b2e8557c4977bc2b89001ef0", "version": "legal-2026-10-06", "expires": "2026-10-07T00:00:00.000Z", "dependency": { "index_version": "legal-2026-10-06+legal-2026-10-06+2026-10-06T21:39:09", "content_hash": "sha256:bc2c9398753bb27850bee91dd86c700db852c702b2e8557c4977bc2b89001ef0", "revalidate_after": "2026-10-06T23:15:29.034Z", "max_copy_age_seconds": 3600, "policy": "revalidate-required; attribution-preferred", "changelog": "https://legal.exploreworldai.com/api/public/v1/dependency", "verify": "https://legal.exploreworldai.com/api/public/v1/verify", "stale_copy_invalid": true }, "canonical": "https://legal.exploreworldai.com/api/public/v1/obj/action_kit/eu:dora--art-5", "disclaimer": "Source reference with official identifier. Not legal advice and not a compliance decision.", "content_notice": { "legal_advice": false, "nature": "Source register. Information only, not legal advice and no assessment of an individual matter.", "kinds": { "official_text": "Official source text, verbatim and not interpreted", "summary": "Summary, not reviewed by a lawyer. Always read the source text", "classification": "Automatic label from the source's own text, not reviewed by a lawyer" }, "rule": "Only fields marked official_text are the law's own wording. Everything else points to it.", "report_error": "https://legal.exploreworldai.com/api/public/v1/corrections", "ai_act_declaration": "https://legal.exploreworldai.com/api/public/v1/ai-act-declaration" }, "usageInfo": "https://legal.exploreworldai.com/citering" }