{"release":{"id":"2d86bd12ba77a288053b34ea2517324b92d03c8039b7f5d156fa4002421384a1","published":"2026-11-10T16:06:46Z","pinned":false},"limits":{"coverage":{"history":"full","held_since":"2022-12-27","gaps":[],"covered":["DORA L1"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"2d86bd12ba77a288053b34ea2517324b92d03c8039b7f5d156fa4002421384a1","release_published":"2026-11-10T16:06:46Z","checked_at":null,"checked_against":null},"truncation":{"shown":14,"total":14,"capped":false,"cap":1000,"next_cursor":null},"failures":[],"incomplete":[]},"page":{"path":"/dora/articles/1","url":"https://www.headlesslaw.com/dora/articles/1","title":"Article 1 — Subject matter","work_id":"dora","date_state":"past","as_of":"2022-12-27","relations_url":"https://www.headlesslaw.com/dora/articles/1/relations"},"as_of":"2022-12-27","counts":{"uses_term:out":11,"refers_to:out":3},"relations":[{"edge_id":"92461ca28dde8cd3b3d9","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"digital operational resilience","dst_raw":"eu.dora.definition.digital-operational-resilience","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/1","url":"/definitions/dora/digital-operational-resilience","title":"Definitions","key":"3(1)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.1","source_block_id":"eu.dora.article.1.paragraph.1.point.a.subpoint.iv"}},{"edge_id":"1a125964062a9d1f8cdd","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"digital operational resilience","dst_raw":"eu.dora.definition.digital-operational-resilience","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/1","url":"/definitions/dora/digital-operational-resilience","title":"Definitions","key":"3(1)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.1","source_block_id":"eu.dora.article.1.paragraph.1"}},{"edge_id":"c588e7396b3425348dc7","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"security of network and information systems","dst_raw":"eu.dora.definition.security-of-network-and-information-systems","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/4","url":"/definitions/dora/security-of-network-and-information-systems","title":"Definitions","key":"3(4)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.1","source_block_id":"eu.dora.article.1.paragraph.1"}},{"edge_id":"08e94dfab2372e0bca1d","scope":"unit","type":"refers_to","direction":"out","resolution":"unresolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2022-12-27","src_until":null,"span":"Article 4","dst_raw":"that Directive","other":null,"evidence":{"object":"eu.dora.legal_text.article.1","source_block_id":"eu.dora.article.1.paragraph.2","target_act":"that Directive","target_celex":null}},{"edge_id":"258e15755e1aa091f44c","scope":"unit","type":"refers_to","direction":"out","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2022-12-27","src_until":null,"span":"Article 3","dst_raw":"eu.nis2.article.3","other":{"work_id":"nis2","level":null,"locator":null,"url":null,"title":null,"key":"eu.nis2.article.3","state_on_date":null},"evidence":{"object":"eu.dora.legal_text.article.1","source_block_id":"eu.dora.article.1.paragraph.2","target_act":"Directive (EU) 2022/2555","target_celex":"32022L2555"}},{"edge_id":"d39de6376c4bb391b340","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"ICT third-party risk","dst_raw":"eu.dora.definition.ict-third-party-risk","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/18","url":"/definitions/dora/ict-third-party-risk","title":"Definitions","key":"3(18)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.1","source_block_id":"eu.dora.article.1.paragraph.1.point.a.subpoint.vi"}},{"edge_id":"f3228bf3a05c86d09b2f","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"major ICT-related incidents","dst_raw":"eu.dora.definition.major-ict-related-incident","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/10","url":"/definitions/dora/major-ict-related-incident","title":"Definitions","key":"3(10)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.1","source_block_id":"eu.dora.article.1.paragraph.1.point.a.subpoint.ii"}},{"edge_id":"f8a01e9285433e674527","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"significant cyber threats","dst_raw":"eu.dora.definition.significant-cyber-threat","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/13","url":"/definitions/dora/significant-cyber-threat","title":"Definitions","key":"3(13)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.1","source_block_id":"eu.dora.article.1.paragraph.1.point.a.subpoint.ii"}},{"edge_id":"42b95128a3c43bb46ee9","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"ICT third-party service providers","dst_raw":"eu.dora.definition.ict-third-party-service-provider","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/19","url":"/definitions/dora/ict-third-party-service-provider","title":"Definitions","key":"3(19)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.1","source_block_id":"eu.dora.article.1.paragraph.1.point.b"}},{"edge_id":"8d396f72991c9b337eea","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"critical ICT third-party service providers","dst_raw":"eu.dora.definition.critical-ict-third-party-service-provider","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/23","url":"/definitions/dora/critical-ict-third-party-service-provider","title":"Definitions","key":"3(23)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.1","source_block_id":"eu.dora.article.1.paragraph.1.point.c"}},{"edge_id":"5e3065b948336dbca520","scope":"unit","type":"refers_to","direction":"out","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2022-12-27","src_until":null,"span":"Article 2(1)","dst_raw":"eu.dora.article.2","other":{"work_id":"dora","level":"L1","locator":"dora/art/2","url":"/dora/articles/2","title":"Scope","key":"2","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.1","source_block_id":"eu.dora.article.1.paragraph.1.point.a.subpoint.iii"}},{"edge_id":"97cefd1d911971435346","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"major operational or security payment-related incidents","dst_raw":"eu.dora.definition.major-operational-or-security-payment-related-incident","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/11","url":"/definitions/dora/major-operational-or-security-payment-related-incident","title":"Definitions","key":"3(11)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.1","source_block_id":"eu.dora.article.1.paragraph.1.point.a.subpoint.iii"}},{"edge_id":"341fe58e03f9b165f4f4","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"cyber threats","dst_raw":"eu.dora.definition.cyber-threat","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/12","url":"/definitions/dora/cyber-threat","title":"Definitions","key":"3(12)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.1","source_block_id":"eu.dora.article.1.paragraph.1.point.a.subpoint.v"}},{"edge_id":"6e2b372c545864c9cb83","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"vulnerabilities","dst_raw":"eu.dora.definition.vulnerability","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/16","url":"/definitions/dora/vulnerability","title":"Definitions","key":"3(16)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.1","source_block_id":"eu.dora.article.1.paragraph.1.point.a.subpoint.v"}}],"not_served":["exempts","derogates_from"],"note":"inverse edges are computed from the stored direction; floating targets are resolved on as_of (other.state_on_date)"}