<!-- headlesslaw {"release":{"id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","published":"2026-11-01T16:41:30Z","pinned":false},"limits":{"coverage":{"history":"full","held_since":"2022-12-27","gaps":[],"covered":["DORA L1"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","release_published":"2026-11-01T16:41:30Z","checked_at":"2026-10-26","checked_against":"EUR-Lex"},"truncation":null,"failures":[],"incomplete":[]},"page":{"path":"/dora/recitals/13","url":"https://www.headlesslaw.com/dora/recitals/13","title":"Recital 13","family":"l1_recital_view","work_id":"dora","view_of":"/dora/recitals","status":"in_force","force_status":"in_force","date_state":"current","requested_date":null,"as_of":"2026-11-01","applies_from":null,"application":null,"version_label":"Regulation (EU) 2022/2554, OJ L 333, 27.12.2022","check":{"against":"EUR-Lex","on":"2026-10-26"},"check_result":"matched","official_url":"https://eur-lex.europa.eu/eli/reg/2022/2554/oj/eng","valid_from":"2022-12-27","valid_until":null,"content_id":"794d1ec37150aae5","versions":["2022-12-27"],"version_url":"https://www.headlesslaw.com/dora/recitals/13/versions/2022-12-27","revision_url":"https://www.headlesslaw.com/dora/recitals/13/versions/2022-12-27/rev/794d1ec37150aae5","versions_url":"https://www.headlesslaw.com/dora/recitals/13/versions","relations_url":"https://www.headlesslaw.com/dora/recitals/13/relations","act_url":"https://www.headlesslaw.com/dora/recitals","source_line":null,"attribution":null,"context":{"act":{"work_id":"dora","path":"/dora/recitals","name":"DORA","number":"Regulation (EU) 2022/2554","celex":"32022R2554","title_official":null,"document_date":null},"position":{"kind":"recital","key":"13","index":13,"articles":106,"annexes":0},"prev":{"path":"/dora/recitals/12","key":"12","title":"Recital 12"},"next":{"path":"/dora/recitals/14","key":"14","title":"Recital 14"},"act_anchor":""}}} -->
# Recital 13

*In force · Regulation (EU) 2022/2554, OJ L 333, 27.12.2022 · Checked against EUR-Lex on 26 Oct 2026 · [Official source](https://eur-lex.europa.eu/eli/reg/2022/2554/oj/eng)*

Financial entities should follow the same approach and the same principle-based rules when addressing ICT risk taking into account their size and overall risk profile, and the nature, scale and complexity of their services, activities and operations. Consistency contributes to enhancing confidence in the financial system and preserving its stability especially in times of high reliance on ICT systems, platforms and infrastructures, which entails increased digital risk. Observing basic cyber hygiene should also avoid imposing heavy costs on the economy by minimising the impact and costs of ICT disruptions.