DORA: What You Need to Know

This document explains the EU Digital Operational Resilience Act (DORA), its scope (financial institutions and ICT third-party providers), core requirements (ICT risk management, incident management, and supply‑chain security), and the testing mandates including annual resilience testing and triennial threat-led penetration tests; it also markets HackerOne’s suite of services (PTaaS, code security audits, bug bounties, and spot checks) as ways to satisfy DORA obligations and produce attestation evidence for regulators.