[non-validated] DORA SFS 0 / SF D: Entity Scope Determination under Financial Sectors
Generated catalog draft. No operational assessment or human approval is claimed.
[non-validated] This question has unresolved selected work.
Question
[non-validated] Is the legal entity confirmed as operating within DORA-covered financial sectors (banking, securities, insurance, or pensions) rather than as a non-financial ICT service provider?
Explanation
[non-validated] Does the legal entity operate within DORA-covered financial sectors (banking, securities, insurance, or pensions) as a financial entity subject to DORA obligations, rather than as a non-financial ICT service provider?
Criterion and evidence
Actor: Legal entity assessed under DORA. Scope: Entity classification determination per Regulation (EU) 2022/2554 Article 2(1). Evidence period: Ongoing. Required evidence: Banking license/sectoral authorization confirming financial entity status. Negative: Non-financial ICT provider status. Missing evidence: Pending sector classification documentation. Alternatives: Competent authority validation or national registration confirming financial sector alignment.
AI assistance prompt
Develop sixteen bounded yes/no factors for DORA: Applicability, proportionality and governance. Identify the assessed legal entity, its DORA role, applicable regime and management-body accountability. Determine financial-entity category, exemptions, group boundary, size and proportionality; distinguish the standard and simplified ICT frameworks and the role of non-critical versus designated critical ICT providers. Cover management-body ownership, resourcing and ICT-risk oversight. Do not treat every provider as directly subject to every financial-entity obligation. DORA article references: 1, 2, 3, 4, 5, 16. Verify entity-role applicability and current primary sources. Missing evidence stays pending; no compliance or assessment is implied.
Clarifications
What evidence confirms financial entity status under DORA?
Banking license or sector-specific authorization (e.g., fixture-000D-1) confirming operation in banking, securities and markets, insurance, or pensions sectors as defined in DORA Article 2(1).
What evidence does NOT satisfy this condition?
Software provider assertions without banking/insurance sector authorization (e.g., fixture-000D-2), as non-financial ICT service providers fall outside DORA's scope for financial-entity obligations.
How are missing classification documents handled?
Pending evidence status applies (e.g., fixture-000D-3); absence of documentation does not automatically constitute failure but prevents confirmation of compliance.
References
DORA: Applicability, proportionality and governance