Compliance with DORA is mandatory for a wide range of financial entities, including banks, insurance companies, investment firms, payment institutions, and credit rating agencies. Additionally, ICT service providers that have contracts with these financial entities may also be within the scope of DORA compliance.