{"release":{"id":"2d86bd12ba77a288053b34ea2517324b92d03c8039b7f5d156fa4002421384a1","published":"2026-11-10T16:06:46Z","pinned":false},"limits":{"coverage":{"history":"full","held_since":"2022-12-27","gaps":[],"covered":["DORA L1"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"2d86bd12ba77a288053b34ea2517324b92d03c8039b7f5d156fa4002421384a1","release_published":"2026-11-10T16:06:46Z","checked_at":null,"checked_against":null},"truncation":{"shown":50,"total":50,"capped":false,"cap":1000,"next_cursor":null},"failures":[],"incomplete":[]},"page":{"path":"/dora/articles/28","url":"https://www.headlesslaw.com/dora/articles/28","title":"Article 28 — General principles","work_id":"dora","date_state":"past","as_of":"2022-12-27","relations_url":"https://www.headlesslaw.com/dora/articles/28/relations"},"as_of":"2022-12-27","counts":{"uses_term:out":41,"refers_to:out":6,"refers_to:in":3},"relations":[{"edge_id":"7fc31ebf07a3c4ed6ddc","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"ICT third-party service provider","dst_raw":"eu.dora.definition.ict-third-party-service-provider","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/19","url":"/definitions/dora/ict-third-party-service-provider","title":"Definitions","key":"3(19)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.28","source_block_id":"eu.dora.article.28.paragraph.4.point.d"}},{"edge_id":"c437d5e17f5e4fcd0224","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"ICT third-party service providers","dst_raw":"eu.dora.definition.ict-third-party-service-provider","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/19","url":"/definitions/dora/ict-third-party-service-provider","title":"Definitions","key":"3(19)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.28","source_block_id":"eu.dora.article.28.paragraph.4.point.d"}},{"edge_id":"b88e75c7ae3b3ce5f813","scope":"unit","type":"refers_to","direction":"out","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2022-12-27","src_until":null,"span":"Article 29","dst_raw":"eu.dora.article.29","other":{"work_id":"dora","level":"L1","locator":"dora/art/29","url":"/dora/articles/29","title":"Preliminary assessment of ICT concentration risk at entity level","key":"29","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.28","source_block_id":"eu.dora.article.28.paragraph.4.point.c"}},{"edge_id":"cfac44d2164aefc684d7","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"ICT concentration risk","dst_raw":"eu.dora.definition.ict-concentration-risk","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/29","url":"/definitions/dora/ict-concentration-risk","title":"Definitions","key":"3(29)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.28","source_block_id":"eu.dora.article.28.paragraph.4.point.c"}},{"edge_id":"1d28951e2647eb6842e0","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"group","dst_raw":"eu.dora.definition.group","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/26","url":"/definitions/dora/group","title":"Definitions","key":"3(26)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.28","source_block_id":"eu.dora.article.28.paragraph.1.point.b.subpoint.ii"}},{"edge_id":"a242f6142ca5e5eda507","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"ICT third-party service providers","dst_raw":"eu.dora.definition.ict-third-party-service-provider","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/19","url":"/definitions/dora/ict-third-party-service-provider","title":"Definitions","key":"3(19)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.28","source_block_id":"eu.dora.article.28.paragraph.1.point.b.subpoint.ii"}},{"edge_id":"f5a5f7fcd7234c42c7ab","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"ICT services","dst_raw":"eu.dora.definition.ict-services","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/21","url":"/definitions/dora/ict-services","title":"Definitions","key":"3(21)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.28","source_block_id":"eu.dora.article.28.paragraph.1.point.b.subpoint.ii"}},{"edge_id":"f3adee4615249d5a7114","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"ICT third-party risk","dst_raw":"eu.dora.definition.ict-third-party-risk","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/18","url":"/definitions/dora/ict-third-party-risk","title":"Definitions","key":"3(18)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.28","source_block_id":"eu.dora.article.28.paragraph.1.point.b"}},{"edge_id":"106fd55a58c4a8ef3ef2","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"critical or important functions","dst_raw":"eu.dora.definition.critical-or-important-function","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/22","url":"/definitions/dora/critical-or-important-function","title":"Definitions","key":"3(22)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.28","source_block_id":"eu.dora.article.28.paragraph.8"}},{"edge_id":"30168614e1b3626d5e5c","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"ICT third-party service providers","dst_raw":"eu.dora.definition.ict-third-party-service-provider","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/19","url":"/definitions/dora/ict-third-party-service-provider","title":"Definitions","key":"3(19)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.28","source_block_id":"eu.dora.article.28.paragraph.8"}},{"edge_id":"4c8c05c1b48ae4d82716","scope":"unit","type":"refers_to","direction":"out","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2022-12-27","src_until":null,"span":"Article 4(2)","dst_raw":"eu.dora.article.4","other":{"work_id":"dora","level":"L1","locator":"dora/art/4","url":"/dora/articles/4","title":"Proportionality principle","key":"4","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.28","source_block_id":"eu.dora.article.28.paragraph.8"}},{"edge_id":"f09f8031f3e986425dcf","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"ICT services","dst_raw":"eu.dora.definition.ict-services","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/21","url":"/definitions/dora/ict-services","title":"Definitions","key":"3(21)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.28","source_block_id":"eu.dora.article.28.paragraph.8"}},{"edge_id":"8a322faf06ba358d00ed","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"ICT risk","dst_raw":"eu.dora.definition.ict-risk","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/5","url":"/definitions/dora/ict-risk","title":"Definitions","key":"3(5)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.28","source_block_id":"eu.dora.article.28.paragraph.7.point.c"}},{"edge_id":"8fd614a1ce8c6cf0fd6f","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"ICT third-party service provider","dst_raw":"eu.dora.definition.ict-third-party-service-provider","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/19","url":"/definitions/dora/ict-third-party-service-provider","title":"Definitions","key":"3(19)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.28","source_block_id":"eu.dora.article.28.paragraph.7.point.c"}},{"edge_id":"2f4f7e4449a8d2fb4855","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"ICT services","dst_raw":"eu.dora.definition.ict-services","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/21","url":"/definitions/dora/ict-services","title":"Definitions","key":"3(21)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.28","source_block_id":"eu.dora.article.28.paragraph.1.point.a"}},{"edge_id":"98043e79a21a7eadccc1","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"ICT third-party risk","dst_raw":"eu.dora.definition.ict-third-party-risk","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/18","url":"/definitions/dora/ict-third-party-risk","title":"Definitions","key":"3(18)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.28","source_block_id":"eu.dora.article.28.paragraph.7.point.b"}},{"edge_id":"d423b1c5942cb082cb94","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"ICT third-party service provider","dst_raw":"eu.dora.definition.ict-third-party-service-provider","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/19","url":"/definitions/dora/ict-third-party-service-provider","title":"Definitions","key":"3(19)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.28","source_block_id":"eu.dora.article.28.paragraph.7.point.b"}},{"edge_id":"8309675c73ad6cf7f609","scope":"unit","type":"refers_to","direction":"out","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2022-12-27","src_until":null,"span":"Article 6(1)","dst_raw":"eu.dora.article.6","other":{"work_id":"dora","level":"L1","locator":"dora/art/6","url":"/dora/articles/6","title":"ICT risk management framework","key":"6","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.28","source_block_id":"eu.dora.article.28.paragraph.1"}},{"edge_id":"92a004be4b92da03be06","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"ICT risk","dst_raw":"eu.dora.definition.ict-risk","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/5","url":"/definitions/dora/ict-risk","title":"Definitions","key":"3(5)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.28","source_block_id":"eu.dora.article.28.paragraph.1"}},{"edge_id":"b2fd9dcd3fd1595b9150","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"ICT third-party risk","dst_raw":"eu.dora.definition.ict-third-party-risk","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/18","url":"/definitions/dora/ict-third-party-risk","title":"Definitions","key":"3(18)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.28","source_block_id":"eu.dora.article.28.paragraph.1"}},{"edge_id":"b5864033aa2463bd74bb","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"ICT services","dst_raw":"eu.dora.definition.ict-services","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/21","url":"/definitions/dora/ict-services","title":"Definitions","key":"3(21)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.28","source_block_id":"eu.dora.article.28.paragraph.3"}},{"edge_id":"bea8817e530f46f06cff","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"ICT third-party service providers","dst_raw":"eu.dora.definition.ict-third-party-service-provider","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/19","url":"/definitions/dora/ict-third-party-service-provider","title":"Definitions","key":"3(19)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.28","source_block_id":"eu.dora.article.28.paragraph.3"}},{"edge_id":"dd589a6f707e8f1cb2da","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"ICT risk","dst_raw":"eu.dora.definition.ict-risk","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/5","url":"/definitions/dora/ict-risk","title":"Definitions","key":"3(5)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.28","source_block_id":"eu.dora.article.28.paragraph.3"}},{"edge_id":"600ba54d422509a2455e","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"ICT third-party service provider","dst_raw":"eu.dora.definition.ict-third-party-service-provider","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/19","url":"/definitions/dora/ict-third-party-service-provider","title":"Definitions","key":"3(19)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.28","source_block_id":"eu.dora.article.28.paragraph.6"}},{"edge_id":"49161961727984ec3991","scope":"unit","type":"refers_to","direction":"out","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2022-12-27","src_until":null,"span":"Article 15","dst_raw":"eu.dora.article.15","other":{"work_id":"dora","level":"L1","locator":"dora/art/15","url":"/dora/articles/15","title":"Further harmonisation of ICT risk management tools, methods, processes and policies","key":"15","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.28","source_block_id":"eu.dora.article.28.paragraph.9"}},{"edge_id":"7735723cf236fe906bb5","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"Joint Committee","dst_raw":"eu.dora.definition.joint-committee","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/62","url":"/definitions/dora/joint-committee","title":"Definitions","key":"3(62)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.28","source_block_id":"eu.dora.article.28.paragraph.9"}},{"edge_id":"8b6992f357a666fedca1","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"ICT services","dst_raw":"eu.dora.definition.ict-services","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/21","url":"/definitions/dora/ict-services","title":"Definitions","key":"3(21)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.28","source_block_id":"eu.dora.article.28.paragraph.9"}},{"edge_id":"63c09a1b3af54f5055d6","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"ICT third-party service provider","dst_raw":"eu.dora.definition.ict-third-party-service-provider","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/19","url":"/definitions/dora/ict-third-party-service-provider","title":"Definitions","key":"3(19)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.28","source_block_id":"eu.dora.article.28.paragraph.7.point.a"}},{"edge_id":"28ed746b5ba8e7e778dd","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"Joint Committee","dst_raw":"eu.dora.definition.joint-committee","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/62","url":"/definitions/dora/joint-committee","title":"Definitions","key":"3(62)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.28","source_block_id":"eu.dora.article.28.paragraph.10"}},{"edge_id":"6a4b1a695a7784b31325","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"ICT third-party service providers","dst_raw":"eu.dora.definition.ict-third-party-service-provider","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/19","url":"/definitions/dora/ict-third-party-service-provider","title":"Definitions","key":"3(19)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.28","source_block_id":"eu.dora.article.28.paragraph.10"}},{"edge_id":"b5334e5dc19e14fc2106","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"critical or important functions","dst_raw":"eu.dora.definition.critical-or-important-function","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/22","url":"/definitions/dora/critical-or-important-function","title":"Definitions","key":"3(22)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.28","source_block_id":"eu.dora.article.28.paragraph.10"}},{"edge_id":"e9bf1df7ba906b5e6076","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"ICT services","dst_raw":"eu.dora.definition.ict-services","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/21","url":"/definitions/dora/ict-services","title":"Definitions","key":"3(21)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.28","source_block_id":"eu.dora.article.28.paragraph.10"}},{"edge_id":"7b11dc707689356b100d","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"ICT services","dst_raw":"eu.dora.definition.ict-services","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/21","url":"/definitions/dora/ict-services","title":"Definitions","key":"3(21)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.28","source_block_id":"eu.dora.article.28.paragraph.7"}},{"edge_id":"7e7a46b6341fe0d8c2c5","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"critical or important functions","dst_raw":"eu.dora.definition.critical-or-important-function","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/22","url":"/definitions/dora/critical-or-important-function","title":"Definitions","key":"3(22)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.28","source_block_id":"eu.dora.article.28.paragraph.5"}},{"edge_id":"c77abf7cfd4de04ed701","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"ICT third-party service providers","dst_raw":"eu.dora.definition.ict-third-party-service-provider","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/19","url":"/definitions/dora/ict-third-party-service-provider","title":"Definitions","key":"3(19)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.28","source_block_id":"eu.dora.article.28.paragraph.5"}},{"edge_id":"9e5f1aa7a13403ec5a28","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"ICT services","dst_raw":"eu.dora.definition.ict-services","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/21","url":"/definitions/dora/ict-services","title":"Definitions","key":"3(21)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.28","source_block_id":"eu.dora.article.28.paragraph.4"}},{"edge_id":"011e7a07d196f281881c","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"critical or important function","dst_raw":"eu.dora.definition.critical-or-important-function","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/22","url":"/definitions/dora/critical-or-important-function","title":"Definitions","key":"3(22)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.28","source_block_id":"eu.dora.article.28.paragraph.4.point.a"}},{"edge_id":"c73a5346ca8f98cb8e09","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"ICT services","dst_raw":"eu.dora.definition.ict-services","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/21","url":"/definitions/dora/ict-services","title":"Definitions","key":"3(21)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.28","source_block_id":"eu.dora.article.28.paragraph.4.point.a"}},{"edge_id":"0cb3752eccea15f4cbac","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"ICT services","dst_raw":"eu.dora.definition.ict-services","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/21","url":"/definitions/dora/ict-services","title":"Definitions","key":"3(21)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.28","source_block_id":"eu.dora.article.28.paragraph.2"}},{"edge_id":"10564c2ea178b2b9ad37","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"critical or important functions","dst_raw":"eu.dora.definition.critical-or-important-function","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/22","url":"/definitions/dora/critical-or-important-function","title":"Definitions","key":"3(22)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.28","source_block_id":"eu.dora.article.28.paragraph.2"}},{"edge_id":"14f3e1b5aa47312b47e3","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"microenterprises","dst_raw":"eu.dora.definition.microenterprise","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/60","url":"/definitions/dora/microenterprise","title":"Definitions","key":"3(60)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.28","source_block_id":"eu.dora.article.28.paragraph.2"}},{"edge_id":"2fa7f40de42990c231e4","scope":"unit","type":"refers_to","direction":"out","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2022-12-27","src_until":null,"span":"Article 16(1)","dst_raw":"eu.dora.article.16","other":{"work_id":"dora","level":"L1","locator":"dora/art/16","url":"/dora/articles/16","title":"Simplified ICT risk management framework","key":"16","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.28","source_block_id":"eu.dora.article.28.paragraph.2"}},{"edge_id":"4a3476f02ca821cd245b","scope":"unit","type":"refers_to","direction":"out","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2022-12-27","src_until":null,"span":"Article 6(9)","dst_raw":"eu.dora.article.6","other":{"work_id":"dora","level":"L1","locator":"dora/art/6","url":"/dora/articles/6","title":"ICT risk management framework","key":"6","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.28","source_block_id":"eu.dora.article.28.paragraph.2"}},{"edge_id":"98d2307cf85d21b9bdbb","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"ICT third-party service providers","dst_raw":"eu.dora.definition.ict-third-party-service-provider","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/19","url":"/definitions/dora/ict-third-party-service-provider","title":"Definitions","key":"3(19)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.28","source_block_id":"eu.dora.article.28.paragraph.2"}},{"edge_id":"b3b2d77dd91f82205555","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"ICT third-party risk","dst_raw":"eu.dora.definition.ict-third-party-risk","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/18","url":"/definitions/dora/ict-third-party-risk","title":"Definitions","key":"3(18)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.28","source_block_id":"eu.dora.article.28.paragraph.2"}},{"edge_id":"cd83c0db457826e06fa0","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"ICT risk","dst_raw":"eu.dora.definition.ict-risk","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/5","url":"/definitions/dora/ict-risk","title":"Definitions","key":"3(5)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.28","source_block_id":"eu.dora.article.28.paragraph.2"}},{"edge_id":"d27ea36bd7ba09476b06","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"management body","dst_raw":"eu.dora.definition.management-body","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/30","url":"/definitions/dora/management-body","title":"Definitions","key":"3(30)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.28","source_block_id":"eu.dora.article.28.paragraph.2"}},{"edge_id":"0c0e13795d182f653002","scope":"unit","type":"refers_to","direction":"in","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2022-12-27","src_until":null,"span":"Article 28(3)","dst_raw":"eu.dora.article.28","other":{"work_id":"dora","level":"L1","locator":"dora/art/31/para/10","url":"/dora/articles/31#p-10","title":"Designation of critical ICT third-party service providers","key":"31(10)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.31","source_block_id":"eu.dora.article.31.paragraph.10"}},{"edge_id":"2011bfe4932184743be9","scope":"unit","type":"refers_to","direction":"in","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2022-12-27","src_until":null,"span":"Article 28","dst_raw":"eu.dora.article.28","other":{"work_id":"dora","level":"L1","locator":"dora/art/42/para/8","url":"/dora/articles/42#p-8","title":"Follow-up by competent authorities","key":"42(8)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.42","source_block_id":"eu.dora.article.42.paragraph.8"}},{"edge_id":"b44bd079c9c2db2133b0","scope":"unit","type":"refers_to","direction":"in","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2022-12-27","src_until":null,"span":"Article 28(4)","dst_raw":"eu.dora.article.28","other":{"work_id":"dora","level":"L1","locator":"dora/art/29/para/1","url":"/dora/articles/29#p-1","title":"Preliminary assessment of ICT concentration risk at entity level","key":"29(1)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.29","source_block_id":"eu.dora.article.29.paragraph.1"}}],"not_served":["exempts","derogates_from"],"note":"inverse edges are computed from the stored direction; floating targets are resolved on as_of (other.state_on_date)"}