What is a DORA gap analysis?

A DORA gap analysis is a structured assessment that maps your organisation's current ICT risk management, incident reporting, resilience testing, third-party oversight, and information sharing practices against the requirements of EU Regulation 2022/2554 (DORA). It identifies where you already comply and where gaps exist, so you can prioritise remediation and build a structured implementation plan.

How long does the DORA readiness assessment take?

The DORA GRC readiness assessment takes approximately 3 minutes. It consists of 25 questions covering all five DORA pillars: ICT risk management, incident reporting, resilience testing, third-party oversight, and information sharing. You receive an instant scored result with a pillar-by-pillar breakdown and specific gap indicators.

Is the DORA gap analysis free?

Yes. The DORA GRC readiness assessment is completely free and requires no account or login. You can take the assessment, review your scored results, and optionally receive a detailed report by email. There is no obligation to purchase anything.

What happens after the DORA assessment?

After completing the assessment, you receive an instant score across all five DORA pillars with a readiness band (strong, moderate, or early stage). The results highlight your weakest areas and specific gaps to address. You can optionally receive a detailed report by email or start a free 14-day trial of the DORA GRC platform to begin structured remediation.

Free Tool

How ready is your organisation
for DORA?

25 questions across all five DORA pillars. See your score instantly. No login required.

Takes 3 to 4 minutes Based on EU Regulation 2022/2554 Results shown immediately

0 of 25 answered

Governance & ICT Risk Management

Art. 5 to 14 — DORA Pillar 1

Incident Management & Reporting

Art. 17 to 23 — DORA Pillar 2

Resilience Testing

Art. 24 to 27 — DORA Pillar 3

Third-Party Risk Management

Art. 28 to 44 — DORA Pillar 4

Information Sharing & Reporting

Art. 45 — DORA Pillar 5

Results are shown immediately below. No account needed.

Calculating...

Get the full 60-question assessment as a PDF

The detailed report includes article-by-article gap analysis, maturity scoring, and a remediation roadmap. Enter your work email and we will send it to you.

Thank you. Check your inbox — we will be in touch shortly.

No spam. One email. You can unsubscribe at any time.

Prefer a spreadsheet? Download the DORA compliance checklist

Download PDF Guide ↓

See your gaps in context

DORA GRC connects your compliance assessments to your ICT asset register, incident log, and third-party risk programme. Your gaps become trackable actions, not just a score on a page.

Start Free Trial — No Credit Card

How ready is your organisationfor DORA?

Get the full 60-question assessment as a PDF

See your gaps in context

Related Guides

How ready is your organisation
for DORA?