Regulator-text citation lookup

not covered · EU DORA (Digital Operational Resilience Act) · score 4.2804

Article 17–18 ICT incident classification / reporting (separate)

Source: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32022R2554

covered · EU DORA (Digital Operational Resilience Act) · score 2.8311

Art. 28(1) — continuous monitoring of ICT third-party providers

Source: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32022R2554

covered · EU DORA (Digital Operational Resilience Act) · score 2.8311

Art. 28(8) — ongoing due-diligence: external-surface scan posture

Source: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32022R2554

meta · EU DORA (Digital Operational Resilience Act) · score 2.6783

Regulation (EU) 2022/2554 (DORA), Articles 28–31, Annex II

Source: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32022R2554

covered · EU DORA (Digital Operational Resilience Act) · score 2.4174

Art. 28(3) — register of contractual ICT-TPP arrangements: domain inventory + criticality flags

Source: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32022R2554

not covered · EU DORA (Digital Operational Resilience Act) · score 2.4174

Art. 28(3) full register fields (legal/contractual data — outside Pulse scope)

Source: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32022R2554

meta · EU DORA (Digital Operational Resilience Act) · score 1.3224

This report supports obligations under DORA Articles 28–31 (ICT third-party risk management) by evidencing continuous monitoring of ICT third-party providers and their concentration risk. Final compliance determinations rest with the entity's management body.

Source: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32022R2554

What this is, what it isn't

What it is: a deterministic keyword-and-ranking search over the eight regulator frameworks QENEX Pulse evidences. Same data the regulator-aware PDFs cite. Returns text exactly as it appears in the canonical reference dict.

What it isn't: not legal advice. Not a substitute for reading the underlying regulator-issued document. Not an AI chatbot — no generation, no paraphrasing, no risk of hallucinated citations. For deeper compliance assessment subscribe to QENEX Pulse (/pulse/) which produces regulator-mapped evidence bundles with cryptographic anchoring.