The five pillars of DORA are:
1. ICT risk management: Identifying and managing risks associated with ICT systems.
2. ICT incident management and reporting: Mechanisms for identifying, classifying, and reporting incidents.
3. Digital Operational Resilience Testing: Regular testing of digital operational resilience, including vulnerability assessments and penetration testing.
4. Information and threat intelligence sharing: Encouraging the sharing of security intelligence within the financial services sector.
5. ICT third-party risk management: Assessing and managing risks associated with critical ICT third-party providers.