Agent layer

DORA

One agent per article. An operative tree is written by hand from the article's conditions. A structural tree follows the article's paragraphs verbatim.

CELEX 32022R2554 · Read 2026-08-18 · The act

Short answer

DORA carries 64 article agents, 0 of them with a hand written operative tree. Every agent has its own address, source line and hash.

Checked against the publisher · 2026-08-18

Start here

Sort

Showing 64 of 64 agents · Last read against source: 2026-08-18

Article	Heading	Tree	Weight
10	Detection	structuralExtended	86
11	Response and recovery	structuralExtended	86
12	Backup policies and procedures, restoration and recovery procedures and methods	structuralExtended	86
13	Learning and evolving	structuralExtended	86
14	Communication	structuralExtended	86
15	Further harmonisation of ICT risk management tools, methods, processes and policies	structuralExtended	86
16	Simplified ICT risk management framework	structuralExtended	86
17	ICT-related incident management process	structuralExtended	86
18	Classification of ICT-related incidents and cyber threats	structuralExtended	86
19	Reporting of major ICT-related incidents and voluntary notification of significant cyber threats	structuralExtended	86
20	Harmonisation of reporting content and templates	structuralExtended	86
21	Centralisation of reporting of major ICT-related incidents	structuralExtended	86
22	Supervisory feedback	structuralExtended	86
23	Operational or security payment-related incidents concerning credit institutions, payment institutions, account information service providers, and electronic money institutions	structuralExtended	86
24	General requirements for the performance of digital operational resilience testing	structuralExtended	86
25	Testing of ICT tools and systems	structuralExtended	86
26	Advanced testing of ICT tools, systems and processes based on TLPT	structuralExtended	86
27	Requirements for testers for the carrying out of TLPT	structuralExtended	86
28	General principles	structuralExtended	86
29	Preliminary assessment of ICT concentration risk at entity level	structuralExtended	86
30	Key contractual provisions	structuralExtended	86
31	Designation of critical ICT third-party service providers	structuralExtended	86
32	Structure of the Oversight Framework	structuralExtended	86
33	Tasks of the Lead Overseer	structuralExtended	86
34	Operational coordination between Lead Overseers	structuralExtended	86
35	Powers of the Lead Overseer	structuralExtended	86
36	Exercise of the powers of the Lead Overseer outside the Union	structuralExtended	86
37	Request for information	structuralExtended	86
38	General investigations	structuralExtended	86
39	Inspections	structuralExtended	86
40	Ongoing oversight	structuralExtended	86
41	Harmonisation of conditions enabling the conduct of the oversight activities	structuralExtended	86
42	Follow-up by competent authorities	structuralExtended	86
43	Oversight fees	structuralExtended	86
44	International cooperation	structuralExtended	86
45	Information-sharing arrangements on cyber threat information and intelligence	structuralExtended	86
46	Competent authorities	structuralExtended	86
47	Cooperation with structures and authorities established by Directive (EU) 2022/2555	structuralExtended	86
48	Cooperation between authorities	structuralExtended	86
49	Financial cross-sector exercises, communication and cooperation	structuralExtended	86
5	Governance and organisation	structuralExtended	86
50	Administrative penalties and remedial measures	structuralExtended	86
51	Exercise of the power to impose administrative penalties and remedial measures	structuralExtended	86
52	Criminal penalties	structuralExtended	86
53	Notification duties	structuralExtended	86
54	Publication of administrative penalties	structuralExtended	86
55	Professional secrecy	structuralExtended	86
56	Data Protection	structuralExtended	86
57	Exercise of the delegation	structuralExtended	86
58	Review clause	structuralExtended	86
59	Amendments to Regulation (EC) No 1060/2009	structuralExtended	86
6	ICT risk management framework	structuralExtended	86
60	Amendments to Regulation (EU) No 648/2012	structuralExtended	86
7	ICT systems, protocols and tools	structuralExtended	86
8	Identification	structuralExtended	86
9	Protection and prevention	structuralExtended	86
1	Subject matter	structuralExtended	82
2	Scope	structuralExtended	82
3	Definitions	structuralExtended	82
4	Proportionality principle	structuralExtended	82
61	Amendments to Regulation (EU) No 909/2014	structuralExtended	78
62	Amendments to Regulation (EU) No 600/2014	structuralExtended	78
63	Amendment to Regulation (EU) 2016/1011	structuralExtended	78
64	Entry into force and application	structuralExtended	78