{"id":7487,"date":"2026-08-17T14:53:18","date_gmt":"2026-08-17T12:53:18","guid":{"rendered":"https:\/\/arcad.lu\/?p=7487"},"modified":"2026-08-17T16:01:17","modified_gmt":"2026-08-17T14:01:17","slug":"dora-resilience-numerique-gouvernance","status":"publish","type":"post","link":"https:\/\/arcad.lu\/en\/dora-resilience-numerique-gouvernance\/","title":{"rendered":"DORA: digital resilience, a governance issue"},"content":{"rendered":"<div data-elementor-type=\"wp-post\" data-elementor-id=\"7487\" class=\"elementor elementor-7487\" data-elementor-post-type=\"post\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-6db90f4 elementor-section-full_width elementor-section-height-default elementor-section-height-default\" data-id=\"6db90f4\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-ebfbb07\" data-id=\"ebfbb07\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-b898738 elementor-widget elementor-widget-html\" data-id=\"b898738\" data-element_type=\"widget\" data-widget_type=\"html.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<style>\n\/* =========================================================\n   ARCAD \u2014 DORA & R\u00c9SILIENCE NUM\u00c9RIQUE\n   Version Elementor\n   Styles encapsul\u00e9s dans .arcad-dora\n   ========================================================= *\/\n\n.arcad-dora {\n    --arcad-navy: #182a49;\n    --arcad-navy-light: #2c4774;\n    --arcad-gold: #d2bc76;\n    --arcad-gold-soft: #f0e8cf;\n    --arcad-cream: #f7f4ed;\n    --arcad-white: #ffffff;\n    --arcad-ink: #24303c;\n    --arcad-muted: #667180;\n    --arcad-line: #e3ded2;\n\n    width: 100%;\n    color: var(--arcad-ink);\n    font-family: inherit;\n    font-size: 17px;\n    line-height: 1.72;\n}\n\n.arcad-dora,\n.arcad-dora * {\n    box-sizing: border-box;\n}\n\n.arcad-dora a {\n    color: var(--arcad-navy-light);\n    text-decoration-thickness: 1px;\n    text-underline-offset: 3px;\n}\n\n.arcad-dora a:hover {\n    color: var(--arcad-navy);\n}\n\n.arcad-dora .arcad-shell {\n    width: 100%;\n    max-width: 1160px;\n    margin: 0 auto;\n}\n\n\/* =========================================================\n   HERO\n   ========================================================= *\/\n\n.arcad-dora .arcad-hero {\n    position: relative;\n    overflow: hidden;\n    padding: clamp(44px, 7vw, 88px);\n    color: var(--arcad-white);\n    background:\n        linear-gradient(\n            125deg,\n            rgba(24, 42, 73, 0.99),\n            rgba(44, 71, 116, 0.95)\n        );\n    border-radius: 4px;\n    box-shadow: 0 24px 60px rgba(24, 42, 73, 0.16);\n}\n\n.arcad-dora .arcad-hero::before,\n.arcad-dora .arcad-hero::after {\n    content: \"\";\n    position: absolute;\n    pointer-events: none;\n    transform: rotate(35deg);\n}\n\n.arcad-dora .arcad-hero::before {\n    width: 260px;\n    height: 260px;\n    right: -115px;\n    top: -120px;\n    border: 1px solid rgba(210, 188, 118, 0.45);\n}\n\n.arcad-dora .arcad-hero::after {\n    width: 190px;\n    height: 190px;\n    right: 35px;\n    bottom: -130px;\n    background: rgba(210, 188, 118, 0.13);\n}\n\n.arcad-dora .arcad-hero-content {\n    position: relative;\n    z-index: 1;\n    max-width: 930px;\n}\n\n.arcad-dora .arcad-eyebrow {\n    margin: 0 0 18px;\n    color: var(--arcad-gold);\n    font-size: 13px;\n    font-weight: 700;\n    line-height: 1.4;\n    letter-spacing: 0.14em;\n    text-transform: uppercase;\n}\n\n.arcad-dora .arcad-title {\n    margin: 0;\n    max-width: 950px;\n    color: var(--arcad-white);\n    font-size: clamp(36px, 5.5vw, 66px);\n    font-weight: 700;\n    line-height: 1.06;\n    letter-spacing: -0.035em;\n}\n\n.arcad-dora .arcad-lead {\n    max-width: 850px;\n    margin: 25px 0 0;\n    color: rgba(255, 255, 255, 0.88);\n    font-size: clamp(19px, 2.2vw, 24px);\n    line-height: 1.55;\n}\n\n.arcad-dora .arcad-meta {\n    display: flex;\n    flex-wrap: wrap;\n    gap: 10px 22px;\n    margin-top: 30px;\n    color: rgba(255, 255, 255, 0.72);\n    font-size: 14px;\n}\n\n\/* =========================================================\n   CONTENU\n   ========================================================= *\/\n\n.arcad-dora .arcad-content {\n    max-width: 960px;\n    margin: 0 auto;\n    padding: clamp(48px, 7vw, 82px) 24px;\n}\n\n.arcad-dora .arcad-intro {\n    margin: 0 0 38px;\n    font-size: 20px;\n    line-height: 1.7;\n}\n\n\/* =========================================================\n   REP\u00c8RES\n   ========================================================= *\/\n\n.arcad-dora .arcad-facts {\n    display: grid;\n    grid-template-columns: repeat(2, minmax(0, 1fr));\n    gap: 18px;\n    margin: 38px 0 62px;\n}\n\n.arcad-dora .arcad-fact {\n    padding: 25px;\n    background: var(--arcad-cream);\n    border-top: 3px solid var(--arcad-gold);\n}\n\n.arcad-dora .arcad-fact strong {\n    display: block;\n    margin-bottom: 8px;\n    color: var(--arcad-navy);\n    font-size: 22px;\n    line-height: 1.25;\n}\n\n.arcad-dora .arcad-fact span {\n    color: var(--arcad-muted);\n    font-size: 15px;\n    line-height: 1.55;\n}\n\n\/* =========================================================\n   SECTIONS\n   ========================================================= *\/\n\n.arcad-dora .arcad-section {\n    display: grid;\n    grid-template-columns: 58px minmax(0, 1fr);\n    gap: 22px;\n    padding: 44px 0;\n    border-top: 1px solid var(--arcad-line);\n}\n\n.arcad-dora .arcad-number {\n    color: var(--arcad-gold);\n    font-size: 15px;\n    font-weight: 700;\n    letter-spacing: 0.08em;\n}\n\n.arcad-dora h2 {\n    margin: -7px 0 20px;\n    color: var(--arcad-navy);\n    font-size: clamp(27px, 3.5vw, 38px);\n    font-weight: 700;\n    line-height: 1.18;\n    letter-spacing: -0.025em;\n}\n\n.arcad-dora h3 {\n    margin: 28px 0 10px;\n    color: var(--arcad-navy);\n    font-size: 21px;\n    line-height: 1.35;\n}\n\n.arcad-dora p {\n    margin: 0 0 18px;\n}\n\n.arcad-dora ul {\n    margin: 20px 0;\n    padding: 0;\n    list-style: none;\n}\n\n.arcad-dora li {\n    position: relative;\n    margin: 11px 0;\n    padding-left: 27px;\n}\n\n.arcad-dora li::before {\n    content: \"\";\n    position: absolute;\n    top: 0.72em;\n    left: 0;\n    width: 8px;\n    height: 8px;\n    background: var(--arcad-gold);\n    transform: rotate(45deg);\n}\n\n\/* =========================================================\n   ENCARTS\n   ========================================================= *\/\n\n.arcad-dora .arcad-callout {\n    margin: 28px 0;\n    padding: 24px 28px;\n    background: var(--arcad-gold-soft);\n    border-left: 4px solid var(--arcad-gold);\n}\n\n.arcad-dora .arcad-callout strong:first-child {\n    color: var(--arcad-navy);\n}\n\n\/* =========================================================\n   \u00c0 RETENIR\n   ========================================================= *\/\n\n.arcad-dora .arcad-takeaway {\n    margin: 50px 0;\n    padding: clamp(30px, 5vw, 48px);\n    color: var(--arcad-white);\n    background: var(--arcad-navy);\n}\n\n.arcad-dora .arcad-takeaway-label {\n    display: block;\n    margin: 0 0 12px;\n    color: var(--arcad-gold);\n    font-size: 13px;\n    font-weight: 700;\n    letter-spacing: 0.14em;\n    text-transform: uppercase;\n}\n\n.arcad-dora .arcad-takeaway p {\n    margin: 0;\n    color: var(--arcad-white);\n    font-size: 18px;\n    line-height: 1.7;\n}\n\n\/* =========================================================\n   CTA\n   ========================================================= *\/\n\n.arcad-dora .arcad-cta {\n    display: grid;\n    grid-template-columns: minmax(0, 1fr) auto;\n    align-items: center;\n    gap: 30px;\n    margin-top: 56px;\n    padding: clamp(30px, 5vw, 48px);\n    background: var(--arcad-cream);\n    border-top: 3px solid var(--arcad-gold);\n}\n\n.arcad-dora .arcad-cta-title {\n    margin: 0 0 10px;\n    color: var(--arcad-navy);\n    font-size: clamp(25px, 3vw, 34px);\n    font-weight: 700;\n    line-height: 1.2;\n}\n\n.arcad-dora .arcad-cta p {\n    margin: 0;\n    color: var(--arcad-muted);\n}\n\n.arcad-dora .arcad-button {\n    display: inline-flex;\n    align-items: center;\n    justify-content: center;\n    min-height: 52px;\n    padding: 13px 22px;\n    color: var(--arcad-white) !important;\n    background: var(--arcad-navy);\n    border: 1px solid var(--arcad-navy);\n    text-decoration: none !important;\n    font-size: 15px;\n    font-weight: 700;\n    white-space: nowrap;\n    transition: background-color 0.2s ease, color 0.2s ease;\n}\n\n.arcad-dora .arcad-button:hover {\n    color: var(--arcad-navy) !important;\n    background: transparent;\n}\n\n\/* =========================================================\n   SOURCES\n   ========================================================= *\/\n\n.arcad-dora .arcad-sources {\n    margin-top: 60px;\n    padding-top: 34px;\n    border-top: 1px solid var(--arcad-line);\n}\n\n.arcad-dora .arcad-sources h3 {\n    margin: 0 0 20px;\n    color: var(--arcad-navy);\n    font-size: 27px;\n    font-weight: 700;\n    line-height: 1.25;\n}\n\n.arcad-dora .arcad-sources ol {\n    margin: 18px 0;\n    padding-left: 22px;\n}\n\n.arcad-dora .arcad-sources ol li {\n    margin: 12px 0;\n    padding-left: 5px;\n    color: var(--arcad-muted);\n    font-size: 15px;\n    line-height: 1.6;\n}\n\n.arcad-dora .arcad-sources ol li::before {\n    display: none;\n}\n\n.arcad-dora .arcad-scope {\n    margin-top: 24px;\n    padding: 18px 20px;\n    color: var(--arcad-muted);\n    background: #faf9f6;\n    font-size: 14px;\n    line-height: 1.6;\n}\n\n\/* =========================================================\n   RESPONSIVE\n   ========================================================= *\/\n\n@media (max-width: 767px) {\n\n    .arcad-dora {\n        font-size: 16px;\n    }\n\n    .arcad-dora .arcad-hero {\n        padding: 38px 24px 42px;\n    }\n\n    .arcad-dora .arcad-title {\n        font-size: clamp(34px, 11vw, 48px);\n    }\n\n    .arcad-dora .arcad-content {\n        padding-left: 20px;\n        padding-right: 20px;\n    }\n\n    .arcad-dora .arcad-facts,\n    .arcad-dora .arcad-cta {\n        grid-template-columns: 1fr;\n    }\n\n    .arcad-dora .arcad-section {\n        grid-template-columns: 1fr;\n        gap: 8px;\n        padding: 36px 0;\n    }\n\n    .arcad-dora .arcad-number {\n        margin-bottom: 3px;\n    }\n\n    .arcad-dora .arcad-button {\n        width: 100%;\n        white-space: normal;\n        text-align: center;\n    }\n}\n<\/style>\n\n\n<article class=\"arcad-dora\" lang=\"fr\">\n\n    <div class=\"arcad-shell\">\n\n        <!-- HERO -->\n        <header class=\"arcad-hero\">\n\n            <div class=\"arcad-hero-content\">\n\n                <p class=\"arcad-eyebrow\">\n                    Digital resilience \u00b7 IT governance \u00b7 Compliance\n                <\/p>\n\n                <h1 class=\"arcad-title\">\n                    DORA: digital resilience, a governance issue\n                <\/h1>\n\n                <p class=\"arcad-lead\">\n                    Applicable from January 2025, the European DORA regulation imposes a single IT resilience framework on the financial sector. Directly applicable in Luxembourg, it makes the management of digital risk \u2014 including among service providers \u2014 a responsibility that extends all the way up to the board of directors and management.\n                <\/p>\n\n                <div class=\"arcad-meta\">\n                    <span>Category: IT &amp; DORA<\/span>\n                    <span>Reading time: 6 minutes<\/span>\n                    <span>Regulation (EU) 2022\/2554<\/span>\n                    <span>17 January 2025 \u2014 Application<\/span>\n                <\/div>\n\n            <\/div>\n\n        <\/header>\n\n\n        <div class=\"arcad-content\">\n\n            <!-- INTRODUCTION -->\n            <div class=\"arcad-intro\">\n\n                <p>\n                    Financial activities now rely almost entirely on computer systems and external providers: hosting, software, cloud services. A failure or cyberattack at one of them can interrupt an entire business. Until recently, the rules governing this risk were scattered. DORA (Digital Operational Resilience Act) addresses this through a single framework \u2014 and makes it a governance issue, not just a technical matter.\n                <\/p>\n\n            <\/div>\n\n\n            <!-- REP\u00c8RES -->\n            <div class=\"arcad-facts\">\n\n                <div class=\"arcad-fact\">\n                    <strong>5 pillars<\/strong>\n                    <span>Structure<\/span>\n                <\/div>\n\n                <div class=\"arcad-fact\">\n                    <strong>CSSF<\/strong>\n                    <span>Authority in Luxembourg<\/span>\n                <\/div>\n\n            <\/div>\n\n\n            <!-- 01 -->\n            <section class=\"arcad-section\">\n\n                <div class=\"arcad-number\" aria-hidden=\"true\">\n                    01\n                <\/div>\n\n                <div>\n\n                    <h2>The framework at a glance<\/h2>\n\n                    <p>\n                        DORA is EU Regulation 2022\/2554. Like any European regulation, it applies directly, without national transposition, and uniformly throughout the Union. In Luxembourg, the Commission de Surveillance du Secteur Financier (CSSF) ensures its monitoring. It concerns a wide range of entities \u2014 banks, investment firms, fund managers, insurers, crypto-asset service providers \u2014 as well as their IT service providers. A proportionality principle eases the obligations for smaller structures.\n                    <\/p>\n\n                    <p>\n                        The regulations are organised around five pillars:\n                    <\/p>\n\n                    <ul>\n                        <li>IT risk management ;<\/li>\n                        <li>the detection and notification of major incidents; ;<\/li>\n                        <li>resilience tests, extending to advanced penetration testing for the most significant entities; ;<\/li>\n                        <li>management of IT vendor risk ;<\/li>\n                        <li>threat intelligence sharing.<\/li>\n                    <\/ul>\n\n                    <p>\n                        DORA complements the broader NIS2 Directive by providing the financial sector with a specific and more demanding framework.\n                    <\/p>\n\n                <\/div>\n\n            <\/section>\n\n\n            <!-- 02 -->\n            <section class=\"arcad-section\">\n\n                <div class=\"arcad-number\" aria-hidden=\"true\">\n                    02\n                <\/div>\n\n                <div>\n\n                    <h2>What DORA changes in practice<\/h2>\n\n                    <ul>\n\n                        <li>\n                            <strong>Responsibility at the top.<\/strong> The IT risk management framework is the responsibility of the management body, which must approve it, understand it and oversee its implementation.\n                        <\/li>\n\n                        <li>\n                            <strong>A register of IT service providers.<\/strong> Each entity shall keep a register of its agreements with information and communication technology (ICT) third-party service providers and make it available to its competent authority upon request.\n                        <\/li>\n\n                        <li>\n                            <strong>Enhanced contracts.<\/strong> IT contracts, especially for critical functions, must provide for audit and access rights, security requirements, incident notification and exit strategies.\n                        <\/li>\n\n                        <li>\n                            <strong>Monitoring of critical service providers.<\/strong> IT service providers deemed critical for the sector are designated at European level and placed under the direct supervision of the European Supervisory Authorities (EBA for banking, ESMA for markets, EIOPA for insurance).\n                        <\/li>\n\n                    <\/ul>\n\n                    <div class=\"arcad-callout\">\n                        <strong>Practical consequence:<\/strong> Resilience does not stop at the walls of the entity. It now encompasses the entire IT supply chain, which the board must be able to assess.\n                    <\/div>\n\n                <\/div>\n\n            <\/section>\n\n\n            <!-- 03 -->\n            <section class=\"arcad-section\">\n\n                <div class=\"arcad-number\" aria-hidden=\"true\">\n                    03\n                <\/div>\n\n                <div>\n\n                    <h2>Points to note<\/h2>\n\n                    <ul>\n\n                        <li>\n                            <strong>Concentration risk<\/strong> depending on a small number of providers, often the same major cloud players, creates a collective vulnerability.\n                        <\/li>\n\n                        <li>\n                            <strong>Exit strategies<\/strong> \u2014 being able to change service provider, or bring activities back in-house, without any disruption to business.\n                        <\/li>\n\n                        <li>\n                            <strong>The quality of the register and documentation<\/strong> \u2014 often underestimated, it determines the ability to respond to the supervisor.\n                        <\/li>\n\n                        <li>\n                            <strong>Proportionality is not an exemption<\/strong> \u2014 the smallest structures have reduced obligations, not none.\n                        <\/li>\n\n                    <\/ul>\n\n                <\/div>\n\n            <\/section>\n\n\n            <!-- 04 -->\n            <section class=\"arcad-section\">\n\n                <div class=\"arcad-number\" aria-hidden=\"true\">\n                    04\n                <\/div>\n\n                <div>\n\n                    <h2>The main stages of the calendar<\/h2>\n\n                    <ul>\n\n                        <li>\n                            <strong>14th December 2022<\/strong> \u2014 adoption of the regulations.\n                        <\/li>\n\n                        <li>\n                            <strong>16 January 2023<\/strong> \u2014 commencement date.\n                        <\/li>\n\n                        <li>\n                            <strong>2024-2025<\/strong> \u2014 gradual adoption of regulatory technical standards (RTS) and implementing technical standards (ITS).\n                        <\/li>\n\n                        <li>\n                            <strong>17 January 2025<\/strong> - full and proper application.\n                        <\/li>\n\n                        <li>\n                            <strong>2025<\/strong> - designation of critical ICT third-party service providers and the establishment of their European oversight.\n                        <\/li>\n\n                        <li>\n                            <strong>Every year, around 30 April<\/strong> \u2014 forwarding of the IT agreements register to the competent authority.\n                        <\/li>\n\n                    <\/ul>\n\n                <\/div>\n\n            <\/section>\n\n\n            <!-- 05 -->\n            <section class=\"arcad-section\">\n\n                <div class=\"arcad-number\" aria-hidden=\"true\">\n                    05\n                <\/div>\n\n                <div>\n\n                    <h2>How to prepare?<\/h2>\n\n                    <ul>\n\n                        <li>\n                            map IT service providers and the functions they support; ;\n                        <\/li>\n\n                        <li>\n                            compile and keep up to date the register of agreements, with a view to annual transmission; ;\n                        <\/li>\n\n                        <li>\n                            review the contractual clauses (audit, security, notification, exit) of critical contracts; ;\n                        <\/li>\n\n                        <li>\n                            set up a major incident detection and notification system; ;\n                        <\/li>\n\n                        <li>\n                            define and execute a resilience testing plan tailored to the entity's profile; ;\n                        <\/li>\n\n                        <li>\n                            ensure that the governing body is informed and actively oversees the system.\n                        <\/li>\n\n                    <\/ul>\n\n                    <p>\n                        Actions to be tailored to the profile, size and business model of each organisation.\n                    <\/p>\n\n                <\/div>\n\n            <\/section>\n\n\n            <!-- \u00c0 RETENIR -->\n            <aside class=\"arcad-takeaway\">\n\n                <span class=\"arcad-takeaway-label\">\n                    To remember\n                <\/span>\n\n                <p>\n                    DORA is not just an IT project: it is a governance framework that holds the board and management accountable for digital resilience, including among their service providers. Applied since January 2025, it is already in force; the challenge now is to bring it to life \u2014 up-to-date register, robust contracts, regular testing.\n                <\/p>\n\n            <\/aside>\n\n\n            <!-- CTA -->\n            <section class=\"arcad-cta\">\n\n                <div>\n\n                    <div class=\"arcad-cta-title\">\n                        Locate your DORA setup and reinforce it.\n                    <\/div>\n\n                    <p>\n                        ARCAD carries out IT and DORA audits \u2014 audit rights, resilience, management of IT service providers \u2014 tailored to the CSSF framework.\n                    <\/p>\n\n                <\/div>\n\n                <a\n                    class=\"arcad-button\"\n                    href=\"mailto:administration@arcad.lu?subject=Demande%20d'\u00e9change%20-%20DORA%20%26%20r\u00e9silience%20num\u00e9rique\"\n                >\n                    Schedule an exchange \u2192\n                <\/a>\n\n            <\/section>\n\n\n            <!-- SOURCES -->\n            <section class=\"arcad-sources\">\n\n                <h3>Official sources<\/h3>\n\n                <ol>\n\n                    <li>\n                        <a\n                            href=\"https:\/\/eur-lex.europa.eu\/eli\/reg\/2022\/2554\/oj\"\n                            target=\"_blank\"\n                            rel=\"noopener noreferrer\"\n                        >\n                            Regulation (EU) 2022\/2554 (DORA) \u2014 EUR-Lex\n                        <\/a>\n                    <\/li>\n\n                    <li>\n                        <a\n                            href=\"https:\/\/www.cssf.lu\/fr\/tic-et-cyber-risque-pour-les-entites-dora\/\"\n                            target=\"_blank\"\n                            rel=\"noopener noreferrer\"\n                        >\n                            CSSF - \u00abICT and cyber-risk: for DORA entities\u00bb\n                        <\/a>\n                    <\/li>\n\n                    <li>\n                        Technical standards of application (delegated regulations), notably (EU) 2024\/1773, (EU) 2025\/295 and (EU) 2025\/420 \u2014 EUR-Lex.\n                    <\/li>\n\n                <\/ol>\n\n                <p class=\"arcad-scope\">\n                    Scope of the article: review verified on 12 August 2026. Technical standards and regulatory decisions published after this date must be verified separately.\n                <\/p>\n\n            <\/section>\n\n        <\/div>\n\n    <\/div>\n\n<\/article>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"<p>DORA imposes a digital resilience framework on financial entities that places the management of IT risk, incidents, and ICT third-party providers under the direct responsibility of governance.<\/p>","protected":false},"author":2,"featured_media":7504,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[1],"tags":[29,27],"class_list":["post-7487","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized","tag-dora","tag-ict"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v25.3.1 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>DORA : r\u00e9silience num\u00e9rique et gouvernance IT<\/title>\n<meta name=\"description\" content=\"Comprendre DORA et ses exigences de r\u00e9silience num\u00e9rique : gouvernance, risque informatique, prestataires TIC, incidents, tests et obligations au Luxembourg.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/arcad.lu\/en\/dora-resilience-numerique-gouvernance\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"DORA : r\u00e9silience num\u00e9rique et gouvernance IT\" \/>\n<meta property=\"og:description\" content=\"Comprendre DORA et ses exigences de r\u00e9silience num\u00e9rique : gouvernance, risque informatique, prestataires TIC, incidents, tests et obligations au Luxembourg.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/arcad.lu\/en\/dora-resilience-numerique-gouvernance\/\" \/>\n<meta property=\"og:site_name\" content=\"ARCAD\" \/>\n<meta property=\"article:published_time\" content=\"2026-08-17T12:53:18+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-08-17T14:01:17+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/arcad.lu\/wp-content\/uploads\/2026\/08\/dora.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1153\" \/>\n\t<meta property=\"og:image:height\" content=\"605\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Bastien Decerfou\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Bastien Decerfou\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/arcad.lu\/dora-resilience-numerique-gouvernance\/\",\"url\":\"https:\/\/arcad.lu\/dora-resilience-numerique-gouvernance\/\",\"name\":\"DORA : r\u00e9silience num\u00e9rique et gouvernance IT\",\"isPartOf\":{\"@id\":\"https:\/\/arcad.lu\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/arcad.lu\/dora-resilience-numerique-gouvernance\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/arcad.lu\/dora-resilience-numerique-gouvernance\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/arcad.lu\/wp-content\/uploads\/2026\/08\/dora.png\",\"datePublished\":\"2026-08-17T12:53:18+00:00\",\"dateModified\":\"2026-08-17T14:01:17+00:00\",\"author\":{\"@id\":\"https:\/\/arcad.lu\/#\/schema\/person\/a087acd8a15d5a534096ac1bf3efc524\"},\"description\":\"Comprendre DORA et ses exigences de r\u00e9silience num\u00e9rique : gouvernance, risque informatique, prestataires TIC, incidents, tests et obligations au Luxembourg.\",\"breadcrumb\":{\"@id\":\"https:\/\/arcad.lu\/dora-resilience-numerique-gouvernance\/#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/arcad.lu\/dora-resilience-numerique-gouvernance\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/arcad.lu\/dora-resilience-numerique-gouvernance\/#primaryimage\",\"url\":\"https:\/\/arcad.lu\/wp-content\/uploads\/2026\/08\/dora.png\",\"contentUrl\":\"https:\/\/arcad.lu\/wp-content\/uploads\/2026\/08\/dora.png\",\"width\":1153,\"height\":605},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/arcad.lu\/dora-resilience-numerique-gouvernance\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Accueil\",\"item\":\"https:\/\/arcad.lu\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"DORA : la r\u00e9silience num\u00e9rique, un enjeu de gouvernance\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/arcad.lu\/#website\",\"url\":\"https:\/\/arcad.lu\/\",\"name\":\"ARCAD\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/arcad.lu\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/arcad.lu\/#\/schema\/person\/a087acd8a15d5a534096ac1bf3efc524\",\"name\":\"Bastien Decerfou\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/arcad.lu\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/2a433ec2c9f0bf45bb4133ffe92fc6404b0bb82145096ad97e743c259599c627?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/2a433ec2c9f0bf45bb4133ffe92fc6404b0bb82145096ad97e743c259599c627?s=96&d=mm&r=g\",\"caption\":\"Bastien Decerfou\"},\"url\":\"https:\/\/arcad.lu\/en\/author\/bdecerf\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"DORA: digital resilience and IT governance","description":"Understanding DORA and its digital resilience requirements: governance, IT risk, ICT third-party providers, incidents, testing, and obligations in Luxembourg.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/arcad.lu\/en\/dora-resilience-numerique-gouvernance\/","og_locale":"en_GB","og_type":"article","og_title":"DORA : r\u00e9silience num\u00e9rique et gouvernance IT","og_description":"Comprendre DORA et ses exigences de r\u00e9silience num\u00e9rique : gouvernance, risque informatique, prestataires TIC, incidents, tests et obligations au Luxembourg.","og_url":"https:\/\/arcad.lu\/en\/dora-resilience-numerique-gouvernance\/","og_site_name":"ARCAD","article_published_time":"2026-08-17T12:53:18+00:00","article_modified_time":"2026-08-17T14:01:17+00:00","og_image":[{"width":1153,"height":605,"url":"https:\/\/arcad.lu\/wp-content\/uploads\/2026\/08\/dora.png","type":"image\/png"}],"author":"Bastien Decerfou","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Bastien Decerfou","Estimated reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/arcad.lu\/dora-resilience-numerique-gouvernance\/","url":"https:\/\/arcad.lu\/dora-resilience-numerique-gouvernance\/","name":"DORA: digital resilience and IT governance","isPartOf":{"@id":"https:\/\/arcad.lu\/#website"},"primaryImageOfPage":{"@id":"https:\/\/arcad.lu\/dora-resilience-numerique-gouvernance\/#primaryimage"},"image":{"@id":"https:\/\/arcad.lu\/dora-resilience-numerique-gouvernance\/#primaryimage"},"thumbnailUrl":"https:\/\/arcad.lu\/wp-content\/uploads\/2026\/08\/dora.png","datePublished":"2026-08-17T12:53:18+00:00","dateModified":"2026-08-17T14:01:17+00:00","author":{"@id":"https:\/\/arcad.lu\/#\/schema\/person\/a087acd8a15d5a534096ac1bf3efc524"},"description":"Understanding DORA and its digital resilience requirements: governance, IT risk, ICT third-party providers, incidents, testing, and obligations in Luxembourg.","breadcrumb":{"@id":"https:\/\/arcad.lu\/dora-resilience-numerique-gouvernance\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/arcad.lu\/dora-resilience-numerique-gouvernance\/"]}]},{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/arcad.lu\/dora-resilience-numerique-gouvernance\/#primaryimage","url":"https:\/\/arcad.lu\/wp-content\/uploads\/2026\/08\/dora.png","contentUrl":"https:\/\/arcad.lu\/wp-content\/uploads\/2026\/08\/dora.png","width":1153,"height":605},{"@type":"BreadcrumbList","@id":"https:\/\/arcad.lu\/dora-resilience-numerique-gouvernance\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Accueil","item":"https:\/\/arcad.lu\/"},{"@type":"ListItem","position":2,"name":"DORA : la r\u00e9silience num\u00e9rique, un enjeu de gouvernance"}]},{"@type":"WebSite","@id":"https:\/\/arcad.lu\/#website","url":"https:\/\/arcad.lu\/","name":"ARCAD","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/arcad.lu\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Person","@id":"https:\/\/arcad.lu\/#\/schema\/person\/a087acd8a15d5a534096ac1bf3efc524","name":"Bastien Decerfou","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/arcad.lu\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/2a433ec2c9f0bf45bb4133ffe92fc6404b0bb82145096ad97e743c259599c627?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/2a433ec2c9f0bf45bb4133ffe92fc6404b0bb82145096ad97e743c259599c627?s=96&d=mm&r=g","caption":"Bastien Decerfou"},"url":"https:\/\/arcad.lu\/en\/author\/bdecerf\/"}]}},"_links":{"self":[{"href":"https:\/\/arcad.lu\/en\/wp-json\/wp\/v2\/posts\/7487","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/arcad.lu\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/arcad.lu\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/arcad.lu\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/arcad.lu\/en\/wp-json\/wp\/v2\/comments?post=7487"}],"version-history":[{"count":15,"href":"https:\/\/arcad.lu\/en\/wp-json\/wp\/v2\/posts\/7487\/revisions"}],"predecessor-version":[{"id":7506,"href":"https:\/\/arcad.lu\/en\/wp-json\/wp\/v2\/posts\/7487\/revisions\/7506"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/arcad.lu\/en\/wp-json\/wp\/v2\/media\/7504"}],"wp:attachment":[{"href":"https:\/\/arcad.lu\/en\/wp-json\/wp\/v2\/media?parent=7487"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/arcad.lu\/en\/wp-json\/wp\/v2\/categories?post=7487"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/arcad.lu\/en\/wp-json\/wp\/v2\/tags?post=7487"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}