--- title: "Article 7 — ICT systems, protocols and tools" type: regulation legal_status: in_force source: "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32022R2554" shortTitle: "Article 7 — ICT systems, protocols and tools" instrument_type: level1_regulation authority: Commission binding: true binding_character: binding mica_level2: false legal_basis: "Regulation (EU) 2022/2554" instrument: dora celex: "32022R2554" regulation: DORA regulation-full: "Regulation (EU) 2022/2554" article: 7 status: in_force text_version: "Regulation (EU) 2022/2554, OJ L 333, 27.12.2022" source_url: "https://eur-lex.europa.eu/eli/reg/2022/2554/oj/eng" check_status: matched verified: true last_checked: 2026-11-09 --- *In force · Regulation (EU) 2022/2554, OJ L 333, 27.12.2022 · Verified 9 Nov 2026 · [Official source](https://eur-lex.europa.eu/eli/reg/2022/2554/oj/eng)* In order to address and manage [ICT risk](https://www.headlesslaw.com/definitions/dora/ict-risk), financial entities shall use and maintain updated ICT systems, protocols and tools that are: **(a)** appropriate to the magnitude of operations supporting the conduct of their activities, in accordance with the proportionality principle as referred to in [Article 4](4.md); **(b)** reliable; **(c)** equipped with sufficient capacity to accurately process the data necessary for the performance of activities and the timely provision of services, and to deal with peak orders, message or transaction volumes, as needed, including where new technology is introduced; **(d)** technologically resilient in order to adequately deal with additional information processing needs as required under stressed market conditions or other adverse situations. *** [Chapter II — ICT risk management](../chapters/ii.md) › Section II · [← Article 6](6.md) · [Article 8 →](8.md)