{"release":{"id":"2d86bd12ba77a288053b34ea2517324b92d03c8039b7f5d156fa4002421384a1","published":"2026-11-10T16:06:46Z","pinned":false},"limits":{"coverage":{"history":"full","held_since":"2022-12-27","gaps":[],"covered":["DORA L1"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"2d86bd12ba77a288053b34ea2517324b92d03c8039b7f5d156fa4002421384a1","release_published":"2026-11-10T16:06:46Z","checked_at":null,"checked_against":null},"truncation":{"shown":13,"total":13,"capped":false,"cap":1000,"next_cursor":null},"failures":[],"incomplete":[]},"page":{"path":"/dora/articles/25","url":"https://www.headlesslaw.com/dora/articles/25","title":"Article 25 — Testing of ICT tools and systems","work_id":"dora","date_state":"past","as_of":"2022-12-27","relations_url":"https://www.headlesslaw.com/dora/articles/25/relations"},"as_of":"2022-12-27","counts":{"uses_term:out":9,"refers_to:out":2,"refers_to:in":2},"relations":[{"edge_id":"6eb6755c174f4142a6f7","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"information assets","dst_raw":"eu.dora.definition.information-asset","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/6","url":"/definitions/dora/information-asset","title":"Definitions","key":"3(6)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.25","source_block_id":"eu.dora.article.25.paragraph.3"}},{"edge_id":"8d5b54e818b02850df73","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"Microenterprises","dst_raw":"eu.dora.definition.microenterprise","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/60","url":"/definitions/dora/microenterprise","title":"Definitions","key":"3(60)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.25","source_block_id":"eu.dora.article.25.paragraph.3"}},{"edge_id":"0111ccb05f19cc9422bf","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"ICT services","dst_raw":"eu.dora.definition.ict-services","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/21","url":"/definitions/dora/ict-services","title":"Definitions","key":"3(21)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.25","source_block_id":"eu.dora.article.25.paragraph.2"}},{"edge_id":"20abf9ae534a8156ff18","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"critical or important functions","dst_raw":"eu.dora.definition.critical-or-important-function","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/22","url":"/definitions/dora/critical-or-important-function","title":"Definitions","key":"3(22)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.25","source_block_id":"eu.dora.article.25.paragraph.2"}},{"edge_id":"6263935b8036e650212c","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"central counterparties","dst_raw":"eu.dora.definition.central-counterparty","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/40","url":"/definitions/dora/central-counterparty","title":"Definitions","key":"3(40)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.25","source_block_id":"eu.dora.article.25.paragraph.2"}},{"edge_id":"a74eb563901d2307fdb2","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"vulnerability","dst_raw":"eu.dora.definition.vulnerability","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/16","url":"/definitions/dora/vulnerability","title":"Definitions","key":"3(16)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.25","source_block_id":"eu.dora.article.25.paragraph.2"}},{"edge_id":"b3af1096063a1d776f34","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"Central securities depositories","dst_raw":"eu.dora.definition.central-securities-depository","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/42","url":"/definitions/dora/central-securities-depository","title":"Definitions","key":"3(42)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.25","source_block_id":"eu.dora.article.25.paragraph.2"}},{"edge_id":"3f97dcc2509351063074","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"vulnerability","dst_raw":"eu.dora.definition.vulnerability","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/16","url":"/definitions/dora/vulnerability","title":"Definitions","key":"3(16)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.25","source_block_id":"eu.dora.article.25.paragraph.1"}},{"edge_id":"aec5fafdaaa507ef9c0c","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"digital operational resilience","dst_raw":"eu.dora.definition.digital-operational-resilience","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/1","url":"/definitions/dora/digital-operational-resilience","title":"Definitions","key":"3(1)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.25","source_block_id":"eu.dora.article.25.paragraph.1"}},{"edge_id":"c162a2b39ac7c3bf0c54","scope":"unit","type":"refers_to","direction":"out","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2022-12-27","src_until":null,"span":"Article 4(2)","dst_raw":"eu.dora.article.4","other":{"work_id":"dora","level":"L1","locator":"dora/art/4","url":"/dora/articles/4","title":"Proportionality principle","key":"4","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.25","source_block_id":"eu.dora.article.25.paragraph.1"}},{"edge_id":"cb6271180992af50abc4","scope":"unit","type":"refers_to","direction":"out","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2022-12-27","src_until":null,"span":"Article 24","dst_raw":"eu.dora.article.24","other":{"work_id":"dora","level":"L1","locator":"dora/art/24","url":"/dora/articles/24","title":"General requirements for the performance of digital operational resilience testing","key":"24","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.25","source_block_id":"eu.dora.article.25.paragraph.1"}},{"edge_id":"c3ba94102ff5660a78bc","scope":"unit","type":"refers_to","direction":"in","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2022-12-27","src_until":null,"span":"Article 25","dst_raw":"eu.dora.article.25","other":{"work_id":"dora","level":"L1","locator":"dora/art/10/para/1","url":"/dora/articles/10#p-1","title":"Detection","key":"10(1)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.10","source_block_id":"eu.dora.article.10.paragraph.1"}},{"edge_id":"fa5ba7d46c2ea2378124","scope":"unit","type":"refers_to","direction":"in","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2022-12-27","src_until":null,"span":"Article 25","dst_raw":"eu.dora.article.25","other":{"work_id":"dora","level":"L1","locator":"dora/art/24/para/2","url":"/dora/articles/24#p-2","title":"General requirements for the performance of digital operational resilience testing","key":"24(2)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.24","source_block_id":"eu.dora.article.24.paragraph.2"}}],"not_served":["exempts","derogates_from"],"note":"inverse edges are computed from the stored direction; floating targets are resolved on as_of (other.state_on_date)"}