DORA Readiness Scorecard

What this scorecard is

The DORA Readiness Scorecard is a short diagnostic tool designed to assess an organisation’s alignment with key expectations under the Digital Operational Resilience Act (DORA).

It focuses on a limited set of high-impact control areas that typically surface early during regulatory reviews, audits, or supervisory discussions.

What it evaluates

The scorecard evaluates five core domains:

  • Immutable audit logging and evidence preservation
  • Platform-level security and monitoring controls
  • Decision traceability and accountability
  • Synchronisation with external compliance and reporting processes
  • Mapping of operational practices to DORA regulatory domains

How scoring works

Based on the responses, the assessment produces one of three outcomes:

  • Full — alignment with core expectations across all evaluated domains
  • Partial — alignment in some areas, with identifiable gaps
  • Risk — material gaps that may require remediation

The scoring logic is fixed and does not adapt dynamically based on user profile or organisation size.

What happens after

After completing the scorecard, the result is presented immediately, together with a brief explanation of what the outcome typically implies in a regulatory or audit context.

The assessment itself does not initiate any automated follow-up. Any further discussion or action remains optional and contextual.

Use and limitations

This scorecard is intended as a diagnostic aid, not a formal compliance determination.
It does not constitute legal advice, regulatory approval, or audit assurance.