Skip to main content
DORARegulation (EU) 2022/2554

Recital 59

DORA Recital 59

Since this Regulation does not require financial entities to cover all critical or important functions in one single threat-led penetration test, financial entities should be free to determine which and how many critical or important functions should be included in the scope of such a test.

46 words in the official text.

Recitals matched by wording (1)

These recitals name no article. The dataset matched them to this one by text similarity, and they are marked so nobody reads a match as a citation.

Source texts: the Official Journal, through the Publications Office. Dataset built 2026-07-29. Study aid, not legal advice.

DORA 32022R2554

Every connection on this page is drawn from the official text of Regulation (EU) 2022/2554. Study aid, not legal advice.

See how DORA sits beside the other three acts on the crossover map, or find what your role must do in the obligations checklist.