DORA Compliance Docs Pack (EU) — RTS/ITS + Templates + Guidance (2024–2025)

Free Download — DORA Compliance Docs Pack (EU) (2024–2025)

A curated, well-organised archive of key EU DORA materials, compiled to help compliance, risk, IT/security, audit, and TPRM/vendor-management teams navigate the core texts faster. All documents are renamed and ordered for quick scanning.

What you get

• ZIP archive with 27+1 files (PDF + DOCX where applicable)
• Consistent naming convention: DORA-XX <Title> (EU) YYYY-NNNN

File list (as delivered)

Core legislation

• DORA-01 Regulation (EU) 2022-2554.pdf
• DORA-02 Amending Directive (EU) 2022-2556.pdf

ICT risk management

• DORA-04 RTS ICT Risk Management (EU) 2024-1774.pdf
• DORA-05 Final Report ICT Risk Management RTS (JC 2023 86).pdf

Major ICT incident reporting

• DORA-06 RTS Incident Classification (EU) 2024-1772.pdf
• DORA-08 RTS Incident Reporting Content (EU) 2025-301.pdf
• DORA-09 ITS Incident Reporting Templates (EU) 2025-302.pdf
• DORA-10 Final Report Incident Reporting RTS-ITS (JC 2024 33).pdf
• DORA-11 Joint Guidelines Cost-Loss Estimation (JC-GL-2024-34).pdf
• DORA-12 Report EU Hub for Incident Reporting (JC 2024 108).pdf

TLPT (Threat-Led Penetration Testing)

• DORA-13 RTS TLPT (EU) 2025-1190.pdf
• DORA-14 Final Report TLPT RTS (JC 2024 29).pdf

TIBER-EU / testing practice (ECB)

• DORA-15A TIBER-EU Control Team Guidance (ECB 2025).pdf
• DORA-15B TIBER-EU Purple Team Best Practices (ECB 2025).pdf
• DORA-15C TIBER-EU Service Provider Procurement (ECB 2025).pdf

ICT third-party risk & RoI (Register of Information)

• DORA-16 RTS ICT Third-Party Policy (EU) 2024-1773.pdf
• DORA-17 ITS Register of Information Templates (EU) 2024-2956.pdf
• DORA-18 RTS Sub-contracting (EU) 2025-532.pdf
• DORA-19 Final Report Register of Information ITS (JC 2023 85).pdf
• DORA-20 ESAs Opinion on RoI ITS Rejection (JC 2024 75).pdf
• DORA-27 ESAs Proposed Changes to RoI ITS (JC 2024 78).docx
• DORA-28 ESAs Proposed Changes to RoI ITS Annex (JC 2024 79).docx

Oversight / CTPPs

• DORA-21 Critical ICT Providers Designation Criteria (EU) 2024-1502.pdf
• DORA-22 Oversight Fees (EU) 2024-1505.pdf
• DORA-23 RTS Oversight Harmonisation (EU) 2025-295.pdf
• DORA-24 RTS Joint Examination Teams (EU) 2025-420.pdf
• DORA-25 Joint Guidelines Oversight Cooperation (JC-GL-2024-36).pdf
• DORA-26 List of Designated CTPPs.pdf

Disclaimer

This is a free, compiled reference pack. I do not claim ownership of the underlying regulatory texts and do not provide legal advice. For legal certainty, always consult official EU publications and competent authority guidance. Not affiliated with EU institutions, the ESAs, or the ECB.