{"release":{"id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","published":"2026-11-01T16:41:30Z","pinned":false},"limits":{"coverage":{"history":"full","held_since":"2022-12-27","gaps":[],"covered":["DORA L1"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","release_published":"2026-11-01T16:41:30Z","checked_at":"2026-10-26","checked_against":"EUR-Lex"},"truncation":null,"failures":[],"incomplete":[]},"page":{"path":"/dora/recitals/10","url":"https://www.headlesslaw.com/dora/recitals/10","title":"Recital 10","family":"l1_recital_view","work_id":"dora","view_of":"/dora/recitals","status":"in_force","force_status":"in_force","date_state":"current","requested_date":null,"as_of":"2026-11-01","applies_from":null,"application":null,"version_label":"Regulation (EU) 2022/2554, OJ L 333, 27.12.2022","check":{"against":"EUR-Lex","on":"2026-10-26"},"check_result":"matched","official_url":"https://eur-lex.europa.eu/eli/reg/2022/2554/oj/eng","valid_from":"2022-12-27","valid_until":null,"content_id":"abed6bf6392ea166","versions":["2022-12-27"],"version_url":"https://www.headlesslaw.com/dora/recitals/10/versions/2022-12-27","revision_url":"https://www.headlesslaw.com/dora/recitals/10/versions/2022-12-27/rev/abed6bf6392ea166","versions_url":"https://www.headlesslaw.com/dora/recitals/10/versions","relations_url":"https://www.headlesslaw.com/dora/recitals/10/relations","act_url":"https://www.headlesslaw.com/dora/recitals","source_line":null,"attribution":null,"context":{"act":{"work_id":"dora","path":"/dora/recitals","name":"DORA","number":"Regulation (EU) 2022/2554","celex":"32022R2554","title_official":null,"document_date":null},"position":{"kind":"recital","key":"10","index":10,"articles":106,"annexes":0},"prev":{"path":"/dora/recitals/9","key":"9","title":"Recital 9"},"next":{"path":"/dora/recitals/11","key":"11","title":"Recital 11"},"act_anchor":""}},"provenance":{"official_url":"https://eur-lex.europa.eu/eli/reg/2022/2554/oj/eng","check":{"result":"matched","checked_at":"2026-10-26","against":"EUR-Lex"},"repo_path":"spaces/dora/recitals.md","unit_text_sha256":"93df3244b7a8d82966f4cfd8e27ea7769319f0e881beb44c0570ce5e5787de8a","note":"the unit is a byte-exact part of the act page, whose check record covers it"},"unit":{"locator":"dora/recitals/rec/10","kind":"recital","key":"10","heading":"","text":"To date, due to the ICT risk related provisions being only partially addressed at Union level, there are gaps or overlaps in important areas, such as ICT-related incident reporting and digital operational resilience testing, and inconsistencies as a result of emerging divergent national rules or cost-ineffective application of overlapping rules. This is particularly detrimental for an ICT-intensive user such as the financial sector since technology risks have no borders and the financial sector deploys its services on a wide cross-border basis within and outside the Union. Individual financial entities operating on a cross-border basis or holding several authorisations (e.g. one financial entity can have a banking, an investment firm, and a payment institution licence, each issued by a different competent authority in one or several Member States) face operational challenges in addressing ICT risk and mitigating adverse impacts of ICT incidents on their own and in a coherent cost-effective way.","marks":[],"text_hash":"93df3244b7a8d82966f4cfd8e27ea7769319f0e881beb44c0570ce5e5787de8a","revision":1,"blocks":[{"locator":"dora/recitals/rec/10/block/1","text_hash":"93df3244b7a8d82966f4cfd8e27ea7769319f0e881beb44c0570ce5e5787de8a","revision":1}]}}