Pillar 1
ICT Risk Management
Build and maintain a DORA-aligned ICT risk framework. Map assets, identify vulnerabilities, assign owners, and track remediation against Articles 6 – 16 requirements.
DORA Solution
All five DORA pillars. One connected platform.
The Digital Operational Resilience Act demands continuous oversight across ICT risk, incidents, testing, and supply chains. Dokimos automates the evidence, workflows, and reporting that keep you compliant between audits — not just during them.
Pillar 2
Incident Reporting
Classify ICT incidents against DORA thresholds, auto-generate initial, intermediate, and final reports, and submit directly to competent authorities within regulatory deadlines.
Pillar 3
Resilience Testing (TLPT)
Manage your digital operational resilience testing programme, including basic testing and Threat-Led Penetration Testing (TLPT), with automated scheduling and evidence capture.
Pillar 4
ICT Third-Party Risk
Maintain DORA's Register of Information, assess critical ICT third-party providers, enforce contractual requirements, and monitor concentration risk across your supply chain.
Pillar 5
ICT Logs & Monitoring
Collect, retain, and analyze ICT logs for threat detection and incident investigation. Comply with DORA Article 20 logging requirements and maintain auditable records across your critical systems.
Platform
Compliance operations that run themselves.
Dokimos brings compliance, risk, IT, and executive teams into a single pane of glass — with live readiness scores, automated evidence collection, and regulator-ready outputs at every stage.
- Article-level control mapping against the full DORA regulatory text.
- Automated evidence collection from your cloud, SIEM, and ITSM tooling.
- Real-time readiness scores with drill-down gap analysis.
- Workflow-driven incident classification and regulator submission.
- Structured TLPT programme management with auditor exports.
- Critical ICT TPP register with contractual clause tracking.
ISO 27001
NIST CSF
TIBER-EU
EBA Guidelines
Incident Report Centre
Detect a major ICT incident. Dokimos classifies severity, drafts your initial notification within 4 hours, and tracks the 72-hour intermediate and 30-day final report deadlines automatically.
Why Dokimos
Built by people who know regulation, not just software.
Regulation-Native Design
Every workflow, field, and report maps directly to DORA articles and RTS requirements — no translation layer between your team and the regulation.
Continuous Compliance Posture
Live readiness scores and automated control testing mean you know your compliance position today, not the day before an audit.
Secure & Sovereign
EU-hosted infrastructure, end-to-end encryption, and private deployment options for institutions with data residency and supervisory notification obligations.
Roadmap
DORA today. The full compliance stack, coming soon.
Dokimos is expanding its coverage to the regulations that sit alongside DORA in every regulated institution's compliance programme.
Live
DORA
Full coverage of ICT risk management, incident reporting, resilience testing, and third-party oversight under Regulation (EU) 2022/2554.
Coming soon
AMLA / 6AMLD
Evidence-ready AML programme management aligned to the new EU Anti-Money Laundering Authority framework and 6th AML Directive.
Coming soon
NIS2
Cybersecurity risk governance, incident notification, and supply-chain security controls for entities in scope of the NIS2 Directive.
See Dokimos in action
Book a 30-minute session with our team. We'll walk through your current DORA programme, identify gaps, and show you exactly how Dokimos closes them.
Email
hello@dokimos.io