DORA applies to 22,000 EU financial entities and ICT providers + incl. infrastructure supporting them worldwide 2. DORA impacts ICT risk governance for financial entities substantially. Industry has 2 years to prepare for DORA implementation by 17 January 2025. 3. DORA introduces holistic risk management framework to ensure consistent services, including ICT and cyber security. 4. DORA defines ICT providers as continuous digital and data service providers, including cloud computing and hardware services. DORA brings a paradigm shift to the ICT sector compared to the previous legal framework.