{"id":45662,"date":"2024-06-14T10:34:26","date_gmt":"2024-06-14T08:34:26","guid":{"rendered":"https:\/\/swissgrc.com\/en\/?page_id=45662"},"modified":"2026-10-07T11:46:35","modified_gmt":"2026-10-07T09:46:35","slug":"digital-operational-resilience-act-dora","status":"publish","type":"page","link":"https:\/\/swissgrc.com\/en\/digital-operational-resilience-act-dora\/","title":{"rendered":"Digital Operational Resilience Act (DORA)"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-page\" data-elementor-id=\"45662\" class=\"elementor elementor-45662\" data-elementor-settings=\"{&quot;ha_cmc_init_switcher&quot;:&quot;no&quot;}\" data-elementor-post-type=\"page\">\n\t\t\t\t<div class=\"elementor-element elementor-element-98b3e79 e-con-full e-flex e-con e-parent\" data-id=\"98b3e79\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-c9687bd elementor-widget elementor-widget-html\" data-id=\"c9687bd\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"html.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<!-- SWISS GRC | DORA page (EN) | Section 01: Hero (#sgdora) -->\r\n<div id=\"sgdora\" class=\"sgd-hero-root\">\r\n<style>\r\n\/* elementor: nahtloser anschluss (neutralizer) *\/\r\n.elementor-widget-html:has(#sgdora){margin-block:0 !important;}\r\n.elementor-widget-container:has(> #sgdora){margin:0 !important;padding:0 !important;background:transparent !important;}\r\n.elementor-element:has(> .elementor-widget-container > #sgdora){margin-block:0 !important;padding-block:0 !important;}\r\n.elementor-column:has(#sgdora) > .elementor-widget-wrap,\r\n.elementor-widget-wrap:has(#sgdora){padding:0 !important;}\r\n.e-con:has(#sgdora),\r\n.e-con-inner:has(#sgdora){margin-block:0 !important;padding-block:0 !important;--gap:0px !important;row-gap:0 !important;}\r\n\r\n\/* design tokens *\/\r\n#sgdora{\r\n  --sgd-navy:#1A2E4C; --sgd-navy-deep:#122238; --sgd-blue:#3062a5;\r\n  --sgd-teal:#17a2ac; --sgd-teal-bright:#2dc6cb; --sgd-mint:#00bfad;\r\n  --sgd-magenta:#B82850; --sgd-gold:#f2c14e; --sgd-line:rgba(255,255,255,.12);\r\n  --sgd-font-head:'Anek Latin','Inter',system-ui,sans-serif;\r\n  --sgd-font-body:'Inter',system-ui,sans-serif;\r\n  font-family:var(--sgd-font-body); box-sizing:border-box;\r\n}\r\n#sgdora *,#sgdora *::before,#sgdora *::after{box-sizing:inherit;}\r\n\r\n\/* hero *\/\r\n#sgdora.sgd-hero-root{\r\n  position:relative; overflow:hidden; color:#fff;\r\n  background:\r\n    radial-gradient(1100px 620px at 82% -10%, rgba(45,198,203,.14), transparent 60%),\r\n    radial-gradient(900px 560px at -10% 110%, rgba(48,98,165,.26), transparent 60%),\r\n    linear-gradient(160deg, var(--sgd-navy) 0%, var(--sgd-navy-deep) 100%);\r\n  padding:100px 24px 96px;\r\n}\r\n#sgdora .sgd-grid-bg{\r\n  position:absolute; inset:0; pointer-events:none; opacity:.45;\r\n  background-image:\r\n    linear-gradient(rgba(255,255,255,.045) 1px, transparent 1px),\r\n    linear-gradient(90deg, rgba(255,255,255,.045) 1px, transparent 1px);\r\n  background-size:56px 56px;\r\n  mask-image:radial-gradient(closest-side at 60% 40%, #000 20%, transparent 100%);\r\n  -webkit-mask-image:radial-gradient(closest-side at 60% 40%, #000 20%, transparent 100%);\r\n}\r\n#sgdora .sgd-hero-inner{position:relative; max-width:1200px; margin:0 auto;\r\n  display:grid; grid-template-columns:minmax(0,1.08fr) minmax(0,.92fr); gap:48px; align-items:center;}\r\n\r\n#sgdora .sgd-eyebrow{display:inline-flex; align-items:center; gap:10px;\r\n  font:600 13px\/1 var(--sgd-font-body); letter-spacing:.14em; text-transform:uppercase;\r\n  color:var(--sgd-teal-bright); margin:0 0 18px;}\r\n#sgdora .sgd-eyebrow::before{content:\"\"; width:26px; height:2px; background:var(--sgd-teal-bright); border-radius:2px;}\r\n\r\n#sgdora h1.sgd-title{overflow-wrap:break-word; \r\n  font-family:var(--sgd-font-head); font-weight:700; margin:0 0 20px;\r\n  font-size:clamp(34px,4.4vw,54px); line-height:1.1; letter-spacing:-.015em; color:#fff;}\r\n#sgdora h1.sgd-title em{font-style:normal; color:var(--sgd-teal-bright);}\r\n#sgdora .sgd-lead{font-size:clamp(16px,1.4vw,18.5px); line-height:1.7; color:rgba(255,255,255,.84);\r\n  max-width:56ch; margin:0 0 30px;}\r\n\r\n#sgdora .sgd-cta-row{display:flex; flex-wrap:wrap; gap:14px; margin:0;}\r\n#sgdora .sgd-btn{display:inline-flex; align-items:center; gap:9px; text-decoration:none;\r\n  font:600 15.5px\/1 var(--sgd-font-body); border-radius:10px; padding:15px 26px;\r\n  transition:transform .18s ease, box-shadow .18s ease, background .18s ease;}\r\n#sgdora .sgd-btn-primary{background:linear-gradient(135deg,var(--sgd-teal) 0%,var(--sgd-mint) 100%); color:#fff; box-shadow:0 8px 24px rgba(23,162,172,.38);}\r\n#sgdora .sgd-btn-primary:hover{transform:translateY(-2px); box-shadow:0 12px 30px rgba(23,162,172,.5); color:#fff;}\r\n#sgdora .sgd-btn-ghost{background:rgba(255,255,255,.07); color:#fff; border:1px solid rgba(255,255,255,.25);}\r\n#sgdora .sgd-btn-ghost:hover{background:rgba(255,255,255,.13); transform:translateY(-2px); color:#fff;}\r\n\r\n\/* eu-emblem (rechte spalte, generisch und ruhig) *\/\r\n#sgdora .sgd-visual{position:relative; display:flex; align-items:center; justify-content:center; min-height:440px;}\r\n#sgdora .sgd-emblem{position:relative; width:min(420px,100%); aspect-ratio:1\/1;}\r\n\r\n#sgdora .sgd-emblem::before{content:\"\"; position:absolute; inset:-12%;\r\n  background:radial-gradient(closest-side, rgba(45,198,203,.16), rgba(48,98,165,.10) 55%, transparent 75%);\r\n  border-radius:50%; pointer-events:none;}\r\n\r\n#sgdora .sgd-orbit{position:absolute; border-radius:50%; border:1px solid rgba(255,255,255,.10);}\r\n#sgdora .sgd-orbit-1{inset:6%;}\r\n#sgdora .sgd-orbit-2{inset:19%; border-color:rgba(255,255,255,.14);}\r\n#sgdora .sgd-orbit-3{inset:33%; border-style:dashed; border-color:rgba(255,255,255,.18);}\r\n\r\n#sgdora .sgd-core{position:absolute; inset:41%; border-radius:50%;\r\n  background:radial-gradient(circle at 38% 32%, rgba(45,198,203,.32), rgba(26,46,76,.9) 70%);\r\n  border:1px solid rgba(45,198,203,.45);\r\n  box-shadow:0 0 40px rgba(45,198,203,.28), inset 0 0 24px rgba(45,198,203,.16);\r\n  animation:sgd-breathe 5.5s ease-in-out infinite;}\r\n#sgdora .sgd-core svg{position:absolute; inset:0; margin:auto; width:44%; height:44%; color:#fff; opacity:.92;}\r\n@keyframes sgd-breathe{0%,100%{transform:scale(1)} 50%{transform:scale(1.045)}}\r\n\r\n\/* eu stars *\/\r\n#sgdora .sgd-stars{position:absolute; inset:6%; animation:sgd-rotate 160s linear infinite;}\r\n#sgdora .sgd-star{position:absolute; top:50%; left:50%; width:22px; height:22px; margin:-11px 0 0 -11px; color:var(--sgd-gold);}\r\n#sgdora .sgd-star svg{width:100%; height:100%; filter:drop-shadow(0 0 6px rgba(242,193,78,.35));}\r\n@keyframes sgd-rotate{from{transform:rotate(0deg)} to{transform:rotate(360deg)}}\r\n\r\n#sgdora .sgd-sat{position:absolute; animation:sgd-rotate linear infinite;}\r\n#sgdora .sgd-sat i{position:absolute; top:-5px; left:50%; margin-left:-5px; width:10px; height:10px; border-radius:50%; display:block;}\r\n#sgdora .sgd-sat-a{inset:19%; animation-duration:44s;}\r\n#sgdora .sgd-sat-a i{background:var(--sgd-teal-bright); box-shadow:0 0 12px rgba(45,198,203,.7);}\r\n#sgdora .sgd-sat-b{inset:19%; animation-duration:44s; animation-delay:-22s;}\r\n#sgdora .sgd-sat-b i{background:var(--sgd-blue); box-shadow:0 0 12px rgba(48,98,165,.8);}\r\n#sgdora .sgd-sat-c{inset:33%; animation-duration:30s; animation-direction:reverse;}\r\n#sgdora .sgd-sat-c i{background:var(--sgd-mint); box-shadow:0 0 12px rgba(0,191,173,.7);}\r\n\r\n\/* chips *\/\r\n#sgdora .sgd-chip{position:absolute; display:inline-flex; align-items:center; gap:8px;\r\n  background:rgba(18,34,56,.82); border:1px solid rgba(255,255,255,.16); border-radius:99px;\r\n  padding:9px 15px; font:600 13px\/1 var(--sgd-font-body); color:rgba(255,255,255,.92);\r\n  backdrop-filter:blur(4px); box-shadow:0 10px 26px rgba(0,0,0,.32); white-space:nowrap;}\r\n#sgdora .sgd-chip svg{width:14px; height:14px; flex:0 0 auto;}\r\n#sgdora .sgd-chip-1{top:9%; right:-2%; color-scheme:dark; animation:sgd-float 7s ease-in-out infinite;}\r\n#sgdora .sgd-chip-1 svg{color:var(--sgd-mint);}\r\n#sgdora .sgd-chip-2{top:46%; left:-7%; animation:sgd-float 8s ease-in-out infinite; animation-delay:-2.5s;}\r\n#sgdora .sgd-chip-2 svg{color:var(--sgd-teal-bright);}\r\n#sgdora .sgd-chip-3{bottom:8%; right:4%; animation:sgd-float 7.5s ease-in-out infinite; animation-delay:-5s;}\r\n#sgdora .sgd-chip-3 svg{color:#7ea6dc;}\r\n@keyframes sgd-float{0%,100%{transform:translateY(0)} 50%{transform:translateY(-9px)}}\r\n\r\n\/* responsive *\/\r\n@media (max-width:1024px){\r\n  #sgdora .sgd-hero-inner{grid-template-columns:1fr; gap:44px;}\r\n  #sgdora .sgd-visual{min-height:0;}\r\n  #sgdora .sgd-emblem{width:min(340px,84vw);}\r\n}\r\n@media (max-width:640px){\r\n  #sgdora.sgd-hero-root{padding:72px 20px 64px;}\r\n  #sgdora .sgd-btn{width:100%; justify-content:center;}\r\n  #sgdora .sgd-star{width:16px; height:16px; margin:-8px 0 0 -8px;}\r\n    #sgdora .sgd-visual{flex-direction:column; gap:22px;}\r\n  #sgdora .sgd-chip{position:static; animation:none;}\r\n  #sgdora .sgd-chips-mobile{display:flex; flex-wrap:wrap; gap:10px; justify-content:center;}\r\n}\r\n@media (min-width:641px){\r\n  #sgdora .sgd-chips-mobile{display:contents;}\r\n}\r\n@media (prefers-reduced-motion:reduce){\r\n  #sgdora .sgd-stars,#sgdora .sgd-sat,#sgdora .sgd-core,#sgdora .sgd-chip{animation:none !important;}\r\n}\r\n<\/style>\r\n\r\n  <div class=\"sgd-grid-bg\" aria-hidden=\"true\"><\/div>\r\n\r\n  <div class=\"sgd-hero-inner\">\r\n\r\n    <div class=\"sgd-copy\">\r\n      <p class=\"sgd-eyebrow\">DORA compliance<\/p>\r\n      <h1 class=\"sgd-title\">DORA has become part of your daily work. <em>We make it lighter.<\/em><\/h1>\r\n      <p class=\"sgd-lead\">Maintaining the register of information, reporting incidents on time, keeping third parties in view: you know exactly what needs to be done. What is often missing is a system that holds it all together. The SwissGRC&#174;&nbsp;Platform brings your DORA topics together in one place: structured, connected and ready to answer at any time.<\/p>\r\n\r\n      <div class=\"sgd-cta-row\">\r\n        <a class=\"sgd-btn sgd-btn-primary\" href=\"#sgdora-cta\">Request a demo<\/a>\r\n        <a class=\"sgd-btn sgd-btn-ghost\" href=\"#sgdora-readiness\">Start the DORA readiness check<\/a>\r\n      <\/div>\r\n\r\n      \r\n    <\/div>\r\n\r\n    <div class=\"sgd-visual\" aria-hidden=\"true\">\r\n      <div class=\"sgd-emblem\">\r\n        <div class=\"sgd-orbit sgd-orbit-1\"><\/div>\r\n        <div class=\"sgd-orbit sgd-orbit-2\"><\/div>\r\n        <div class=\"sgd-orbit sgd-orbit-3\"><\/div>\r\n\r\n        <div class=\"sgd-stars\" id=\"sgd-stars\"><\/div>\r\n\r\n        <span class=\"sgd-sat sgd-sat-a\"><i><\/i><\/span>\r\n        <span class=\"sgd-sat sgd-sat-b\"><i><\/i><\/span>\r\n        <span class=\"sgd-sat sgd-sat-c\"><i><\/i><\/span>\r\n\r\n        <div class=\"sgd-core\">\r\n          <svg viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.6\" stroke-linecap=\"round\" stroke-linejoin=\"round\">\r\n            <path d=\"M12 3l7 3v5c0 4.6-3 8.4-7 10-4-1.6-7-5.4-7-10V6l7-3z\"\/>\r\n            <path d=\"M9 12l2 2 4-4\"\/>\r\n          <\/svg>\r\n        <\/div>\r\n      <\/div>\r\n\r\n      <div class=\"sgd-chips-mobile\">\r\n        <span class=\"sgd-chip sgd-chip-1\"><svg viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2.2\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M20 6L9 17l-5-5\"\/><\/svg>Register of information ready<\/span>\r\n        <span class=\"sgd-chip sgd-chip-2\"><svg viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2.2\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M20 6L9 17l-5-5\"\/><\/svg>Incidents reported on time<\/span>\r\n        <span class=\"sgd-chip sgd-chip-3\"><svg viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2.2\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M20 6L9 17l-5-5\"\/><\/svg>Third parties in view<\/span>\r\n      <\/div>\r\n    <\/div>\r\n\r\n  <\/div>\r\n\r\n<script>\r\n(function(){\r\n  var host = document.getElementById('sgd-stars');\r\n  if(!host) return;\r\n  var star = '<svg viewBox=\"0 0 24 24\" fill=\"currentColor\" aria-hidden=\"true\"><path d=\"M12 2.6l2.35 6.02 6.45.38-5 4.1 1.62 6.26L12 15.9l-5.42 3.46 1.62-6.26-5-4.1 6.45-.38L12 2.6z\"\/><\/svg>';\r\n  for(var i=0;i<12;i++){\r\n    var s = document.createElement('span');\r\n    s.className = 'sgd-star';\r\n    s.style.transform = 'rotate(' + (i*30) + 'deg) translateY(-' + 'calc(50% * 0.92 * 2)'.replace(\/.*\/, '') + ')';\r\n    host.appendChild(s);\r\n    s.innerHTML = star;\r\n  }\r\n  function place(){\r\n    var r = host.getBoundingClientRect().width \/ 2;\r\n    var stars = host.children;\r\n    for(var i=0;i<stars.length;i++){\r\n      stars[i].style.transform = 'rotate(' + (i*30) + 'deg) translateY(-' + r + 'px)';\r\n    }\r\n  }\r\n  place();\r\n  window.addEventListener('resize', place, {passive:true});\r\n})();\r\n<\/script>\r\n<\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-e3ab0ae e-con-full e-flex e-con e-parent\" data-id=\"e3ab0ae\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-6ebb907 elementor-widget elementor-widget-html\" data-id=\"6ebb907\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"html.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<!-- SWISS GRC | DORA page (EN) | Section 02: Lage 2026 & Timeline (#sgdora-lage) -->\r\n<div id=\"sgdora-lage\">\r\n<style>\r\n.elementor-widget-html:has(#sgdora-lage){margin-block:0 !important;}\r\n.elementor-widget-container:has(> #sgdora-lage){margin:0 !important;padding:0 !important;background:transparent !important;}\r\n.elementor-element:has(> .elementor-widget-container > #sgdora-lage){margin-block:0 !important;padding-block:0 !important;}\r\n.elementor-column:has(#sgdora-lage) > .elementor-widget-wrap,\r\n.elementor-widget-wrap:has(#sgdora-lage){padding:0 !important;}\r\n.e-con:has(#sgdora-lage),.e-con-inner:has(#sgdora-lage){margin-block:0 !important;padding-block:0 !important;--gap:0px !important;row-gap:0 !important;}\r\n\r\n#sgdora-lage{\r\n  --sgd-navy:#1A2E4C; --sgd-blue:#3062a5; --sgd-teal:#17a2ac; --sgd-teal-bright:#2dc6cb;\r\n  --sgd-mint:#00bfad; --sgd-magenta:#B82850; --sgd-grey:#666666; --sgd-ink:#22354f;\r\n  --sgd-font-head:'Anek Latin','Inter',system-ui,sans-serif;\r\n  --sgd-font-body:'Inter',system-ui,sans-serif;\r\n  font-family:var(--sgd-font-body); box-sizing:border-box;\r\n  background:linear-gradient(180deg,#F5F8FB 0%, #FFFFFF 100%);\r\n  padding:88px 24px;\r\n}\r\n#sgdora-lage *,#sgdora-lage *::before,#sgdora-lage *::after{box-sizing:inherit;}\r\n#sgdora-lage .sgd-wrap{max-width:1200px; margin:0 auto;}\r\n#sgdora-lage .sgd-eyebrow{display:inline-flex; align-items:center; gap:10px; font:600 13px\/1 var(--sgd-font-body);\r\n  letter-spacing:.14em; text-transform:uppercase; color:var(--sgd-teal); margin:0 0 14px;}\r\n#sgdora-lage .sgd-eyebrow::before{content:\"\"; width:26px; height:2px; background:var(--sgd-teal); border-radius:2px;}\r\n#sgdora-lage h2{font-family:var(--sgd-font-head); font-weight:700; font-size:clamp(28px,3.4vw,42px);\r\n  line-height:1.12; letter-spacing:-.01em; color:var(--sgd-navy); margin:0 0 16px; max-width:22ch;}\r\n#sgdora-lage .sgd-sub{font-size:17px; line-height:1.7; color:var(--sgd-grey); max-width:66ch; margin:0 0 48px;}\r\n\r\n\/* Stats-Band *\/\r\n#sgdora-lage .sgd-stats{display:grid; grid-template-columns:repeat(4,minmax(0,1fr)); gap:16px; margin:0 0 60px;}\r\n#sgdora-lage .sgd-stat{background:#fff; border:1px solid #E3EAF2; border-radius:14px; padding:24px 22px;\r\n  box-shadow:0 6px 18px rgba(26,46,76,.05);}\r\n#sgdora-lage .sgd-stat b{display:block; font:700 34px\/1 var(--sgd-font-head); color:var(--sgd-navy); margin-bottom:8px;}\r\n#sgdora-lage .sgd-stat b i{font-style:normal; color:var(--sgd-teal);}\r\n#sgdora-lage .sgd-stat span{font:500 13.5px\/1.5 var(--sgd-font-body); color:var(--sgd-grey);}\r\n#sgdora-lage .sgd-stat small{display:block; margin-top:10px; font:500 11px\/1.4 var(--sgd-font-body); color:#9AA9BC;}\r\n\r\n\/* Timeline *\/\r\n#sgdora-lage .sgd-tl{position:relative;}\r\n#sgdora-lage .sgd-tl-track{position:relative; display:grid; grid-template-columns:repeat(5,minmax(0,1fr)); gap:0; margin-bottom:26px;}\r\n#sgdora-lage .sgd-tl-track::before{content:\"\"; position:absolute; left:2%; right:2%; top:11px; height:3px;\r\n  background:linear-gradient(90deg, var(--sgd-blue), var(--sgd-teal-bright)); border-radius:3px; opacity:.35;}\r\n#sgdora-lage .sgd-tl-node{position:relative; background:none; border:0; cursor:pointer; padding:0 8px; text-align:center;\r\n  font-family:var(--sgd-font-body); -webkit-tap-highlight-color:transparent;}\r\n#sgdora-lage .sgd-tl-node i{display:block; width:22px; height:22px; margin:0 auto 12px; border-radius:50%;\r\n  background:#fff; border:3px solid var(--sgd-blue); transition:all .2s ease; position:relative; z-index:1;}\r\n#sgdora-lage .sgd-tl-node b{display:block; font:700 15px\/1.2 var(--sgd-font-head); color:var(--sgd-navy); margin-bottom:4px;}\r\n#sgdora-lage .sgd-tl-node span{display:block; font:500 12px\/1.4 var(--sgd-font-body); color:var(--sgd-grey);}\r\n#sgdora-lage .sgd-tl-node[aria-selected=\"true\"] i{background:var(--sgd-teal); border-color:var(--sgd-teal);\r\n  box-shadow:0 0 0 6px rgba(23,162,172,.15);}\r\n#sgdora-lage .sgd-tl-node[aria-selected=\"true\"] b{color:var(--sgd-teal);}\r\n#sgdora-lage .sgd-tl-node:focus-visible{outline:2px solid var(--sgd-teal); outline-offset:4px; border-radius:8px;}\r\n\r\n#sgdora-lage .sgd-tl-panel{background:var(--sgd-navy); color:#fff; border-radius:16px; padding:34px 38px;\r\n  display:none; animation:sgd-fade .35s ease; box-shadow:0 18px 44px rgba(26,46,76,.22);}\r\n#sgdora-lage .sgd-tl-panel.sgd-active{display:grid; grid-template-columns:auto 1fr; gap:28px; align-items:start;}\r\n@keyframes sgd-fade{from{opacity:0; transform:translateY(8px)} to{opacity:1; transform:none}}\r\n#sgdora-lage .sgd-tl-year{font:700 44px\/1 var(--sgd-font-head); color:var(--sgd-teal-bright); min-width:120px;}\r\n#sgdora-lage .sgd-tl-panel h3{margin:0 0 10px; font:600 20px\/1.3 var(--sgd-font-head); color:#fff;}\r\n#sgdora-lage .sgd-tl-panel p{margin:0 0 14px; font:400 15px\/1.7 var(--sgd-font-body); color:rgba(255,255,255,.82); max-width:75ch;}\r\n#sgdora-lage .sgd-tl-panel .sgd-so-what{display:flex; gap:10px; align-items:flex-start; background:rgba(45,198,203,.1);\r\n  border:1px solid rgba(45,198,203,.3); border-radius:10px; padding:12px 15px; max-width:75ch;}\r\n#sgdora-lage .sgd-tl-panel .sgd-so-what svg{width:17px; height:17px; flex:0 0 auto; margin-top:2px; color:var(--sgd-teal-bright);}\r\n#sgdora-lage .sgd-tl-panel .sgd-so-what span{font:500 13.5px\/1.6 var(--sgd-font-body); color:rgba(255,255,255,.92);}\r\n\r\n@media (prefers-reduced-motion:reduce){\r\n  #sgdora-lage .sgd-tl-panel{animation:none;}\r\n  #sgdora-lage .sgd-tl-node i{transition:none;}\r\n}\r\n\/* mobile: timeline als klar antippbare accordion-liste *\/\r\n@media (max-width:900px){\r\n  #sgdora-lage .sgd-stats{grid-template-columns:repeat(2,minmax(0,1fr));}\r\n  #sgdora-lage .sgd-tl-track{grid-template-columns:1fr; gap:10px;}\r\n  #sgdora-lage .sgd-tl-track::before{display:none;}\r\n  #sgdora-lage .sgd-tl-node{display:grid; grid-template-columns:auto 1fr auto; gap:2px 14px; text-align:left; align-items:center;\r\n    padding:15px 16px; border-radius:12px; background:#F7FAFC; border:1px solid #E3EAF2;}\r\n  #sgdora-lage .sgd-tl-node i{margin:0; grid-row:1 \/ span 2; width:16px; height:16px; border-width:4px;}\r\n  #sgdora-lage .sgd-tl-node b{grid-column:2;}\r\n  #sgdora-lage .sgd-tl-node span{grid-column:2;}\r\n  \/* Chevron als Tipp-Hinweis *\/\r\n  #sgdora-lage .sgd-tl-node::after{content:\"\"; grid-column:3; grid-row:1 \/ span 2; width:11px; height:11px;\r\n    border-right:2.4px solid #B7C3D3; border-bottom:2.4px solid #B7C3D3; transform:rotate(45deg);\r\n    transition:transform .25s ease, border-color .2s ease; justify-self:end;}\r\n  #sgdora-lage .sgd-tl-node[aria-selected=\"true\"]{background:#fff; border-color:var(--sgd-teal);\r\n    box-shadow:0 8px 22px rgba(23,162,172,.12);}\r\n  #sgdora-lage .sgd-tl-node[aria-selected=\"true\"]::after{transform:rotate(225deg); border-color:var(--sgd-teal);}\r\n  \/* Panel oeffnet direkt unter dem Knoten *\/\r\n  #sgdora-lage .sgd-tl-panel{border-radius:0 0 14px 14px; margin:-6px 0 4px; box-shadow:none;}\r\n  #sgdora-lage .sgd-tl-panel.sgd-active{grid-template-columns:1fr; gap:12px; padding:22px 20px 24px;}\r\n  #sgdora-lage .sgd-tl-year{font-size:34px; min-width:0;}\r\n}\r\n@media (max-width:560px){\r\n  #sgdora-lage{padding:60px 18px;}\r\n  #sgdora-lage .sgd-stats{grid-template-columns:1fr;}\r\n}\r\n<\/style>\r\n\r\n  <div class=\"sgd-wrap\">\r\n    <p class=\"sgd-eyebrow\">DORA in 2026<\/p>\r\n    <h2>From preparation to supervision in practice<\/h2>\r\n    <p class=\"sgd-sub\">DORA is no longer a future topic. Supervisors are examining, the register of information is submitted annually, and critical ICT third-party providers are under direct European oversight. Anyone still working with spreadsheets is falling behind.<\/p>\r\n\r\n    <div class=\"sgd-stats\" role=\"list\">\r\n      <div class=\"sgd-stat\" role=\"listitem\"><b>19<\/b><span>critical ICT third-party providers designated by the ESAs<\/span><small>ESAs, November 2025<\/small><\/div>\r\n      <div class=\"sgd-stat\" role=\"listitem\"><b>600<i>+<\/i><\/b><span>major ICT incidents reported in Germany since DORA took effect<\/span><small>BaFin, 2026<\/small><\/div>\r\n      <div class=\"sgd-stat\" role=\"listitem\"><b>63<i>%<\/i><\/b><span>of incidents reported in Austria linked to external ICT providers<\/span><small>FMA, one year of DORA<\/small><\/div>\r\n      <div class=\"sgd-stat\" role=\"listitem\"><b>4<i>h<\/i><\/b><span>deadline for the initial notification after classifying a major incident<\/span><small>DORA reporting process<\/small><\/div>\r\n    <\/div>\r\n\r\n    <div class=\"sgd-tl\">\r\n      <div class=\"sgd-tl-track\" role=\"tablist\" aria-label=\"DORA milestones\">\r\n        <button class=\"sgd-tl-node\" role=\"tab\" aria-selected=\"false\" data-panel=\"p2023\"><i aria-hidden=\"true\"><\/i><b>2023<\/b><span>Entry into force<\/span><\/button>\r\n        <button class=\"sgd-tl-node\" role=\"tab\" aria-selected=\"false\" data-panel=\"p2025a\"><i aria-hidden=\"true\"><\/i><b>Jan 2025<\/b><span>DORA applies<\/span><\/button>\r\n        <button class=\"sgd-tl-node\" role=\"tab\" aria-selected=\"false\" data-panel=\"p2025b\"><i aria-hidden=\"true\"><\/i><b>Nov 2025<\/b><span>ESAs publish CTPP list<\/span><\/button>\r\n        <button class=\"sgd-tl-node\" role=\"tab\" aria-selected=\"true\" data-panel=\"p2026\"><i aria-hidden=\"true\"><\/i><b>2026<\/b><span>Operational oversight<\/span><\/button>\r\n        <button class=\"sgd-tl-node\" role=\"tab\" aria-selected=\"false\" data-panel=\"p2027\"><i aria-hidden=\"true\"><\/i><b>Outlook<\/b><span>Deepening &amp; expansion<\/span><\/button>\r\n      <\/div>\r\n\r\n      <div class=\"sgd-tl-panel\" id=\"p2023\" role=\"tabpanel\">\r\n        <div class=\"sgd-tl-year\">2023<\/div>\r\n        <div>\r\n          <h3>DORA enters into force<\/h3>\r\n          <p>Regulation (EU) 2022\/2554 enters into force on 16 January 2023. Financial entities and ICT providers get two years to align governance, processes and contracts with the five pillars of digital resilience. In parallel, the ESAs flesh out the requirements in regulatory and implementing technical standards (RTS and ITS).<\/p>\r\n          <div class=\"sgd-so-what\"><svg viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><circle cx=\"12\" cy=\"12\" r=\"10\"\/><path d=\"M12 8v5M12 16.5v.5\"\/><\/svg><span>What this means today: the transition period is over. Supervisors expect processes in operation, not concepts.<\/span><\/div>\r\n        <\/div>\r\n      <\/div>\r\n\r\n      <div class=\"sgd-tl-panel\" id=\"p2025a\" role=\"tabpanel\">\r\n        <div class=\"sgd-tl-year\">2025<\/div>\r\n        <div>\r\n          <h3>DORA applies: reporting duties and the register of information become reality<\/h3>\r\n          <p>DORA has applied since 17 January 2025. Financial entities report major ICT incidents within tight deadlines and submit their register of information covering all contractual arrangements with ICT third-party providers for the first time. Supervisors identify recurring errors as early as the first submission round: incomplete registers, missing exit strategies and contracts not yet aligned with the RTS minimum content.<\/p>\r\n          <div class=\"sgd-so-what\"><svg viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><circle cx=\"12\" cy=\"12\" r=\"10\"\/><path d=\"M12 8v5M12 16.5v.5\"\/><\/svg><span>What this means today: data quality in the register of information is a supervisory focus. Manually maintained lists do not hold up.<\/span><\/div>\r\n        <\/div>\r\n      <\/div>\r\n\r\n      <div class=\"sgd-tl-panel\" id=\"p2025b\" role=\"tabpanel\">\r\n        <div class=\"sgd-tl-year\">2025<\/div>\r\n        <div>\r\n          <h3>ESAs designate 19 critical ICT third-party providers<\/h3>\r\n          <p>On 18 November 2025, EBA, ESMA and EIOPA publish the first list of critical ICT third-party providers (CTPPs), including major cloud platforms, network and data centre operators and specialised financial data providers. These providers now come under direct European oversight. Importantly, operational responsibility for third-party risk remains entirely with the financial entity.<\/p>\r\n          <div class=\"sgd-so-what\"><svg viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><circle cx=\"12\" cy=\"12\" r=\"10\"\/><path d=\"M12 8v5M12 16.5v.5\"\/><\/svg><span>What this means today: you need to make your CTPP dependencies transparent, assess concentration risk and evidence your exit strategies.<\/span><\/div>\r\n        <\/div>\r\n      <\/div>\r\n\r\n      <div class=\"sgd-tl-panel sgd-active\" id=\"p2026\" role=\"tabpanel\">\r\n        <div class=\"sgd-tl-year\">2026<\/div>\r\n        <div>\r\n          <h3>Operational oversight begins<\/h3>\r\n          <p>The ESAs set up Joint Examination Teams and appoint a Lead Overseer for each critical ICT third-party provider, with far-reaching information, control and inspection powers. At the same time, the second submission round of the register of information is under way, and the register is now transmitted to the ESAs every year. National authorities such as BaFin run workshops so the errors of the first round are not repeated.<\/p>\r\n          <div class=\"sgd-so-what\"><svg viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><circle cx=\"12\" cy=\"12\" r=\"10\"\/><path d=\"M12 8v5M12 16.5v.5\"\/><\/svg><span>What this means today: your register, your incident data and your third-party assessments need to be consistent and retrievable at all times. That is exactly what the SwissGRC&#174;&nbsp;Platform is built for.<\/span><\/div>\r\n        <\/div>\r\n      <\/div>\r\n\r\n      <div class=\"sgd-tl-panel\" id=\"p2027\" role=\"tabpanel\">\r\n        <div class=\"sgd-tl-year\">2027<span style=\"font-size:20px;\">+<\/span><\/div>\r\n        <div>\r\n          <h3>Deeper supervision and a growing scope<\/h3>\r\n          <p>Supervisory practice deepens: extended examinations, annually updated CTPP lists and a growing focus on threat-led penetration testing (TLPT) for significant institutions. In Germany, the FinmadiG additionally widens the scope. Organisations that treat DORA as a continuous process rather than a project hold the advantage.<\/p>\r\n          <div class=\"sgd-so-what\"><svg viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><circle cx=\"12\" cy=\"12\" r=\"10\"\/><path d=\"M12 8v5M12 16.5v.5\"\/><\/svg><span>What this means today: build DORA compliance as a permanent, tool-supported process, not an annual fire drill.<\/span><\/div>\r\n        <\/div>\r\n      <\/div>\r\n    <\/div>\r\n  <\/div>\r\n\r\n<script>\r\n(function(){\r\n  var root=document.getElementById('sgdora-lage');\r\n  if(!root) return;\r\n  var track=root.querySelector('.sgd-tl-track');\r\n  var tl=root.querySelector('.sgd-tl');\r\n  var nodes=[].slice.call(root.querySelectorAll('.sgd-tl-node'));\r\n  var panels=[].slice.call(root.querySelectorAll('.sgd-tl-panel'));\r\n  var mq=window.matchMedia('(max-width: 900px)');\r\n  var placedMobile=false;\r\n\r\n  function panelFor(n){ return root.querySelector('#'+n.getAttribute('data-panel')); }\r\n\r\n  function activate(n, doScroll){\r\n    nodes.forEach(function(x){x.setAttribute('aria-selected','false');});\r\n    panels.forEach(function(p){p.classList.remove('sgd-active');});\r\n    n.setAttribute('aria-selected','true');\r\n    var p=panelFor(n);\r\n    if(p) p.classList.add('sgd-active');\r\n    if(doScroll && mq.matches){\r\n      requestAnimationFrame(function(){ n.scrollIntoView({behavior:'smooth', block:'start'}); });\r\n    }\r\n  }\r\n\r\n  function toMobile(){\r\n    \/\/ Panels direkt hinter ihren Knoten einsetzen (Accordion)\r\n    nodes.forEach(function(n){\r\n      var p=panelFor(n);\r\n      if(p) n.insertAdjacentElement('afterend', p);\r\n    });\r\n    placedMobile=true;\r\n  }\r\n  function toDesktop(){\r\n    \/\/ Panels zurueck ans Ende der Timeline\r\n    panels.forEach(function(p){ tl.appendChild(p); });\r\n    placedMobile=false;\r\n  }\r\n\r\n  nodes.forEach(function(n){\r\n    n.addEventListener('click',function(){ activate(n, true); });\r\n  });\r\n\r\n  function sync(){\r\n    if(mq.matches && !placedMobile) toMobile();\r\n    if(!mq.matches && placedMobile) toDesktop();\r\n  }\r\n  sync();\r\n  mq.addEventListener && mq.addEventListener('change', sync);\r\n})();\r\n<\/script>\r\n<\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-51b3d14 e-con-full e-flex e-con e-parent\" data-id=\"51b3d14\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-9208e9b elementor-widget elementor-widget-html\" data-id=\"9208e9b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"html.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div id=\"sgdora-saeulen\">\r\n<style>\r\n.elementor-widget-html:has(#sgdora-saeulen){margin-block:0 !important;}\r\n.elementor-widget-container:has(> #sgdora-saeulen){margin:0 !important;padding:0 !important;background:transparent !important;}\r\n.elementor-element:has(> .elementor-widget-container > #sgdora-saeulen){margin-block:0 !important;padding-block:0 !important;}\r\n.elementor-column:has(#sgdora-saeulen) > .elementor-widget-wrap,\r\n.elementor-widget-wrap:has(#sgdora-saeulen){padding:0 !important;}\r\n.e-con:has(#sgdora-saeulen),.e-con-inner:has(#sgdora-saeulen){margin-block:0 !important;padding-block:0 !important;--gap:0px !important;row-gap:0 !important;}\r\n\r\n#sgdora-saeulen{\r\n  --sgd-navy:#1A2E4C; --sgd-blue:#3062a5; --sgd-teal:#17a2ac; --sgd-teal-bright:#2dc6cb;\r\n  --sgd-mint:#00bfad; --sgd-magenta:#B82850; --sgd-grey:#666666;\r\n  --sgd-font-head:'Anek Latin','Inter',system-ui,sans-serif;\r\n  --sgd-font-body:'Inter',system-ui,sans-serif;\r\n  font-family:var(--sgd-font-body); box-sizing:border-box; background:#fff; padding:88px 24px;\r\n}\r\n#sgdora-saeulen *,#sgdora-saeulen *::before,#sgdora-saeulen *::after{box-sizing:inherit;}\r\n#sgdora-saeulen .sgd-wrap{max-width:1200px; margin:0 auto;}\r\n#sgdora-saeulen .sgd-eyebrow{display:inline-flex; align-items:center; gap:10px; font:600 13px\/1 var(--sgd-font-body);\r\n  letter-spacing:.14em; text-transform:uppercase; color:var(--sgd-teal); margin:0 0 14px;}\r\n#sgdora-saeulen .sgd-eyebrow::before{content:\"\"; width:26px; height:2px; background:var(--sgd-teal); border-radius:2px;}\r\n#sgdora-saeulen h2{font-family:var(--sgd-font-head); font-weight:700; font-size:clamp(28px,3.4vw,42px);\r\n  line-height:1.12; letter-spacing:-.01em; color:var(--sgd-navy); margin:0 0 16px; max-width:24ch;}\r\n#sgdora-saeulen .sgd-sub{font-size:17px; line-height:1.7; color:var(--sgd-grey); max-width:66ch; margin:0 0 44px;}\r\n\r\n#sgdora-saeulen .sgd-explorer{display:grid; grid-template-columns:minmax(0,.9fr) minmax(0,1.5fr); gap:26px; align-items:start;}\r\n#sgdora-saeulen .sgd-pillar-list{display:grid; gap:10px;}\r\n#sgdora-saeulen .sgd-pillar{display:grid; grid-template-columns:auto 1fr auto; align-items:center; gap:14px;\r\n  width:100%; text-align:left; background:#F7FAFC; border:1px solid #E3EAF2; border-radius:14px;\r\n  padding:16px 18px; cursor:pointer; font-family:var(--sgd-font-body);\r\n  transition:border-color .2s ease, background .2s ease, transform .2s ease; -webkit-tap-highlight-color:transparent;}\r\n#sgdora-saeulen .sgd-pillar:hover{border-color:var(--sgd-teal); transform:translateX(3px);}\r\n#sgdora-saeulen .sgd-pillar:focus-visible{outline:2px solid var(--sgd-teal); outline-offset:3px;}\r\n#sgdora-saeulen .sgd-pillar .sgd-pnum{font:700 13px\/1 var(--sgd-font-head); color:#fff; background:var(--sgd-blue);\r\n  width:30px; height:30px; border-radius:9px; display:grid; place-items:center; transition:background .2s ease;}\r\n#sgdora-saeulen .sgd-pillar b{display:block; font:600 15.5px\/1.3 var(--sgd-font-head); color:var(--sgd-navy);}\r\n#sgdora-saeulen .sgd-pillar small{display:block; font:500 12px\/1.4 var(--sgd-font-body); color:var(--sgd-grey); margin-top:3px;}\r\n#sgdora-saeulen .sgd-pillar svg{width:16px; height:16px; color:#B7C3D3; transition:transform .2s ease, color .2s ease;}\r\n#sgdora-saeulen .sgd-pillar[aria-selected=\"true\"]{background:#fff; border-color:var(--sgd-teal);\r\n  box-shadow:0 10px 26px rgba(23,162,172,.12);}\r\n#sgdora-saeulen .sgd-pillar[aria-selected=\"true\"] .sgd-pnum{background:var(--sgd-teal);}\r\n#sgdora-saeulen .sgd-pillar[aria-selected=\"true\"] svg{color:var(--sgd-teal); transform:translateX(3px);}\r\n\r\n#sgdora-saeulen .sgd-detail{background:linear-gradient(160deg,var(--sgd-navy) 0%,#122238 100%);\r\n  border-radius:18px; padding:36px 40px; color:#fff; min-height:420px; position:relative; overflow:hidden;}\r\n#sgdora-saeulen .sgd-detail::after{content:\"\"; position:absolute; right:-90px; top:-90px; width:260px; height:260px;\r\n  border-radius:50%; background:radial-gradient(circle, rgba(45,198,203,.18), transparent 70%); pointer-events:none;}\r\n#sgdora-saeulen .sgd-detail-panel{display:none; animation:sgd-fade-s .3s ease; position:relative;}\r\n#sgdora-saeulen .sgd-detail-panel.sgd-on{display:block;}\r\n@keyframes sgd-fade-s{from{opacity:0; transform:translateY(8px)} to{opacity:1; transform:none}}\r\n#sgdora-saeulen .sgd-detail .sgd-art{display:inline-flex; align-items:center; gap:8px; font:600 11.5px\/1 var(--sgd-font-body);\r\n  letter-spacing:.1em; text-transform:uppercase; color:var(--sgd-teal-bright);\r\n  background:rgba(45,198,203,.12); border:1px solid rgba(45,198,203,.35); border-radius:99px; padding:7px 13px; margin:0 0 16px;}\r\n#sgdora-saeulen .sgd-detail h3{margin:0 0 12px; font:600 24px\/1.25 var(--sgd-font-head); color:#fff;}\r\n#sgdora-saeulen .sgd-detail .sgd-req{margin:0 0 22px; font:400 15px\/1.7 var(--sgd-font-body); color:rgba(255,255,255,.8); max-width:70ch;}\r\n#sgdora-saeulen .sgd-how{border-top:1px solid rgba(255,255,255,.14); padding-top:20px;}\r\n#sgdora-saeulen .sgd-how h4{margin:0 0 14px; font:600 13px\/1 var(--sgd-font-body); letter-spacing:.1em;\r\n  text-transform:uppercase; color:var(--sgd-mint);}\r\n#sgdora-saeulen .sgd-how ul{list-style:none; margin:0; padding:0; display:grid; gap:11px;}\r\n#sgdora-saeulen .sgd-how li{display:flex; gap:11px; align-items:flex-start; font:400 14.5px\/1.6 var(--sgd-font-body); color:rgba(255,255,255,.88);}\r\n#sgdora-saeulen .sgd-how li svg{width:17px; height:17px; flex:0 0 auto; margin-top:3px; color:var(--sgd-mint);}\r\n#sgdora-saeulen .sgd-how li b{color:#fff; font-weight:600;}\r\n\r\n@media (prefers-reduced-motion:reduce){\r\n  #sgdora-saeulen .sgd-pillar,#sgdora-saeulen .sgd-pillar svg,#sgdora-saeulen .sgd-pillar .sgd-pnum{transition:none;}\r\n  #sgdora-saeulen .sgd-detail-panel{animation:none;}\r\n}\r\n\/* mobile: horizontale wischkarten *\/\r\n@media (max-width:960px){\r\n  #sgdora-saeulen .sgd-explorer{display:block;}\r\n  \/* Tab-Liste wird zum horizontalen Scroll-Track *\/\r\n  #sgdora-saeulen.sgd-is-mobile .sgd-pillar-list{display:flex; gap:14px; overflow-x:auto; scroll-snap-type:x mandatory;\r\n    -webkit-overflow-scrolling:touch; scroll-behavior:smooth; margin:0; padding:4px 0 6px; width:100%; max-width:100%;\r\n    scrollbar-width:none;}\r\n  #sgdora-saeulen.sgd-is-mobile{overflow-x:hidden;}\r\n  #sgdora-saeulen.sgd-is-mobile .sgd-wrap{overflow-x:clip;}\r\n  #sgdora-saeulen.sgd-is-mobile .sgd-pillar-list::-webkit-scrollbar{display:none;}\r\n  \/* jede Karte: volle Breite, eine pro Ansicht *\/\r\n  #sgdora-saeulen.sgd-is-mobile .sgd-card{flex:0 0 calc(100% - 34px); scroll-snap-align:center; min-width:0;\r\n    background:linear-gradient(160deg,var(--sgd-navy) 0%,#122238 100%); border-radius:18px; overflow:hidden;\r\n    display:flex; flex-direction:column;}\r\n  \/* Kartenkopf (aus dem alten Pillar-Button) *\/\r\n  #sgdora-saeulen.sgd-is-mobile .sgd-pillar{display:flex; align-items:center; gap:12px; width:100%;\r\n    background:rgba(255,255,255,.05); border:0; border-bottom:1px solid rgba(255,255,255,.12);\r\n    border-radius:0; padding:18px 20px; transform:none !important; box-shadow:none !important; cursor:default;}\r\n  #sgdora-saeulen.sgd-is-mobile .sgd-pillar .sgd-pnum{background:var(--sgd-teal); flex:0 0 auto;}\r\n  #sgdora-saeulen.sgd-is-mobile .sgd-pillar b{color:#fff; overflow-wrap:anywhere;}\r\n  #sgdora-saeulen.sgd-is-mobile .sgd-pillar small{color:rgba(255,255,255,.6);}\r\n  #sgdora-saeulen.sgd-is-mobile .sgd-pillar > svg{display:none;} \/* Chevron weg, Swipe statt Klick *\/\r\n  \/* Panel gehoert fest zur Karte, immer sichtbar *\/\r\n  #sgdora-saeulen.sgd-is-mobile .sgd-detail{background:transparent; border-radius:0; padding:22px 20px 24px;\r\n    min-height:0; margin:0; overflow:visible;}\r\n  #sgdora-saeulen.sgd-is-mobile .sgd-detail::after{display:none;}\r\n  #sgdora-saeulen.sgd-is-mobile .sgd-detail-panel{display:block; animation:none;}\r\n  #sgdora-saeulen.sgd-is-mobile .sgd-detail h3{font-size:21px; overflow-wrap:anywhere;}\r\n  \/* Punkte-Indikator *\/\r\n  #sgdora-saeulen .sgd-dots{display:none;}\r\n  #sgdora-saeulen.sgd-is-mobile .sgd-dots{display:flex; justify-content:center; gap:9px; margin-top:20px;}\r\n  #sgdora-saeulen.sgd-is-mobile .sgd-dots button{width:9px; height:9px; padding:0; border-radius:50%; border:0;\r\n    background:#CBD9E8; cursor:pointer; transition:background .2s ease, transform .2s ease; -webkit-tap-highlight-color:transparent;}\r\n  #sgdora-saeulen.sgd-is-mobile .sgd-dots button[aria-current=\"true\"]{background:var(--sgd-teal); transform:scale(1.35);}\r\n  \/* Wisch-Hinweis *\/\r\n  #sgdora-saeulen .sgd-swipe-hint{display:none;}\r\n  #sgdora-saeulen.sgd-is-mobile .sgd-swipe-hint{display:flex; align-items:center; justify-content:center; gap:8px;\r\n    margin-top:12px; font:500 12.5px\/1 var(--sgd-font-body); color:var(--sgd-grey);}\r\n  #sgdora-saeulen.sgd-is-mobile .sgd-swipe-hint svg{width:15px; height:15px; color:var(--sgd-teal);}\r\n}\r\n@media (max-width:560px){ #sgdora-saeulen{padding:60px 18px;} }\r\n<\/style>\r\n\r\n  <div class=\"sgd-wrap\">\r\n    <p class=\"sgd-eyebrow\">The five pillars of DORA<\/p>\r\n    <h2>Five pillars, one platform<\/h2>\r\n    <p class=\"sgd-sub\">DORA spreads its requirements across five fields of action. The SwissGRC&#174;&nbsp;Platform connects them in one integrated data model: risks, incidents, tests and third parties interlock instead of sitting in separate silos. Pick a pillar and see what implementation looks like in practice.<\/p>\r\n\r\n    <div class=\"sgd-explorer\">\r\n      <div class=\"sgd-pillar-list\" role=\"tablist\" aria-label=\"DORA pillars\">\r\n        <button class=\"sgd-pillar\" role=\"tab\" aria-selected=\"true\" data-panel=\"s1\">\r\n          <span class=\"sgd-pnum\">1<\/span>\r\n          <span><b>ICT risk management<\/b><small>Art. 5 to 16<\/small><\/span>\r\n          <svg viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2.4\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M9 6l6 6-6 6\"\/><\/svg>\r\n        <\/button>\r\n        <button class=\"sgd-pillar\" role=\"tab\" aria-selected=\"false\" data-panel=\"s2\">\r\n          <span class=\"sgd-pnum\">2<\/span>\r\n          <span><b>Incident management and reporting<\/b><small>Art. 17 to 23<\/small><\/span>\r\n          <svg viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2.4\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M9 6l6 6-6 6\"\/><\/svg>\r\n        <\/button>\r\n        <button class=\"sgd-pillar\" role=\"tab\" aria-selected=\"false\" data-panel=\"s3\">\r\n          <span class=\"sgd-pnum\">3<\/span>\r\n          <span><b>Digital resilience testing<\/b><small>Art. 24 to 27<\/small><\/span>\r\n          <svg viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2.4\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M9 6l6 6-6 6\"\/><\/svg>\r\n        <\/button>\r\n        <button class=\"sgd-pillar\" role=\"tab\" aria-selected=\"false\" data-panel=\"s4\">\r\n          <span class=\"sgd-pnum\">4<\/span>\r\n          <span><b>ICT third-party risk<\/b><small>Art. 28 to 44, incl. register of information<\/small><\/span>\r\n          <svg viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2.4\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M9 6l6 6-6 6\"\/><\/svg>\r\n        <\/button>\r\n        <button class=\"sgd-pillar\" role=\"tab\" aria-selected=\"false\" data-panel=\"s5\">\r\n          <span class=\"sgd-pnum\">5<\/span>\r\n          <span><b>Information sharing<\/b><small>Art. 45<\/small><\/span>\r\n          <svg viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2.4\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M9 6l6 6-6 6\"\/><\/svg>\r\n        <\/button>\r\n      <\/div>\r\n\r\n      <div class=\"sgd-detail\">\r\n        <div class=\"sgd-detail-panel sgd-on\" id=\"s1\" role=\"tabpanel\">\r\n          <p class=\"sgd-art\">Pillar 1 \u00b7 Foundation<\/p>\r\n          <h3>ICT risk management<\/h3>\r\n          <p class=\"sgd-req\">Financial entities must run a sound, documented ICT risk management framework: inventory systems and assets, identify, assess, treat and continuously monitor risks, with clear accountability at the level of the management body.<\/p>\r\n          <div class=\"sgd-how\">\r\n            <h4>How you implement it with the SwissGRC&#174;&nbsp;Platform<\/h4>\r\n            <ul>\r\n              <li><svg viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2.4\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M20 6L9 17l-5-5\"\/><\/svg><span><b>Connected ICT inventory:<\/b> capture protected assets, systems and processes and link them to risks, controls and providers.<\/span><\/li>\r\n              <li><svg viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2.4\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M20 6L9 17l-5-5\"\/><\/svg><span><b>Integrated ISMS:<\/b> information security and ICT risk in one data model, including measure tracking.<\/span><\/li>\r\n              <li><svg viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2.4\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M20 6L9 17l-5-5\"\/><\/svg><span><b>Reporting for the management body:<\/b> dashboards and reports that serve supervisory requirements and board expectations alike.<\/span><\/li>\r\n            <\/ul>\r\n          <\/div>\r\n        <\/div>\r\n\r\n        <div class=\"sgd-detail-panel\" id=\"s2\" role=\"tabpanel\">\r\n          <p class=\"sgd-art\">Pillar 2 \u00b7 Responsiveness<\/p>\r\n          <h3>Managing and reporting ICT-related incidents<\/h3>\r\n          <p class=\"sgd-req\">Incidents must be detected and classified, and major cases reported to the competent authority within tight deadlines: initial notification, intermediate report and final report, consistent and traceable.<\/p>\r\n          <div class=\"sgd-how\">\r\n            <h4>How you implement it with the SwissGRC&#174;&nbsp;Platform<\/h4>\r\n            <ul>\r\n              <li><svg viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2.4\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M20 6L9 17l-5-5\"\/><\/svg><span><b>End-to-end incident management:<\/b> from capture through classification to root cause analysis in a single workflow.<\/span><\/li>\r\n              <li><svg viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2.4\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M20 6L9 17l-5-5\"\/><\/svg><span><b>Deadlines under control:<\/b> structured reporting processes with clear responsibilities, so the initial notification goes out on time.<\/span><\/li>\r\n              <li><svg viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2.4\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M20 6L9 17l-5-5\"\/><\/svg><span><b>Linked to risk management:<\/b> every incident feeds the cause, event and impact chain and sharpens your risk view.<\/span><\/li>\r\n            <\/ul>\r\n          <\/div>\r\n        <\/div>\r\n\r\n        <div class=\"sgd-detail-panel\" id=\"s3\" role=\"tabpanel\">\r\n          <p class=\"sgd-art\">Pillar 3 \u00b7 Resilience<\/p>\r\n          <h3>Testing digital operational resilience<\/h3>\r\n          <p class=\"sgd-req\">Regular testing, from vulnerability assessments to threat-led penetration testing (TLPT) for significant institutions, makes sure protection, detection and recovery capabilities work in practice.<\/p>\r\n          <div class=\"sgd-how\">\r\n            <h4>How you implement it with the SwissGRC&#174;&nbsp;Platform<\/h4>\r\n            <ul>\r\n              <li><svg viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2.4\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M20 6L9 17l-5-5\"\/><\/svg><span><b>Test planning and follow-up:<\/b> document test types, cycles and results centrally and manage findings as measures.<\/span><\/li>\r\n              <li><svg viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2.4\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M20 6L9 17l-5-5\"\/><\/svg><span><b>BCM built in:<\/b> create and test contingency plans and feed the lessons straight back into risks and controls.<\/span><\/li>\r\n              <li><svg viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2.4\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M20 6L9 17l-5-5\"\/><\/svg><span><b>Audit-ready evidence:<\/b> a complete history of all tests and measures for audit and supervision.<\/span><\/li>\r\n            <\/ul>\r\n          <\/div>\r\n        <\/div>\r\n\r\n        <div class=\"sgd-detail-panel\" id=\"s4\" role=\"tabpanel\">\r\n          <p class=\"sgd-art\">Pillar 4 \u00b7 Supervisory focus 2026<\/p>\r\n          <h3>Managing ICT third-party risk<\/h3>\r\n          <p class=\"sgd-req\">The register of information covering all contractual arrangements with ICT third-party providers is transmitted to supervisors every year. Add due diligence, minimum contract content, concentration risk and exit strategies for critical functions. With ESA oversight of CTPPs, this pillar takes centre stage in 2026.<\/p>\r\n          <div class=\"sgd-how\">\r\n            <h4>How you implement it with the SwissGRC&#174;&nbsp;Platform<\/h4>\r\n            <ul>\r\n              <li><svg viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2.4\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M20 6L9 17l-5-5\"\/><\/svg><span><b>Register of information under DORA:<\/b> capture it in a structured way, keep it current and keep it ready for submission.<\/span><\/li>\r\n              <li><svg viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2.4\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M20 6L9 17l-5-5\"\/><\/svg><span><b>Third-party risk management:<\/b> assess and monitor providers and make concentration risk visible, including CTPP dependencies.<\/span><\/li>\r\n              <li><svg viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2.4\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M20 6L9 17l-5-5\"\/><\/svg><span><b>Exit strategies documented:<\/b> record exit plans for critical services and keep them up to date.<\/span><\/li>\r\n            <\/ul>\r\n          <\/div>\r\n        <\/div>\r\n\r\n        <div class=\"sgd-detail-panel\" id=\"s5\" role=\"tabpanel\">\r\n          <p class=\"sgd-art\">Pillar 5 \u00b7 Collective defence<\/p>\r\n          <h3>Sharing cyber threat information<\/h3>\r\n          <p class=\"sgd-req\">DORA encourages the voluntary exchange of threat intelligence between financial entities, within trusted communities and in line with data protection. Those who share and receive spot attack patterns earlier.<\/p>\r\n          <div class=\"sgd-how\">\r\n            <h4>How you implement it with the SwissGRC&#174;&nbsp;Platform<\/h4>\r\n            <ul>\r\n              <li><svg viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2.4\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M20 6L9 17l-5-5\"\/><\/svg><span><b>Document the threat picture:<\/b> capture external intelligence in a structured way and link it to your own risks and scenarios.<\/span><\/li>\r\n              <li><svg viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2.4\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M20 6L9 17l-5-5\"\/><\/svg><span><b>Knowledge becomes action:<\/b> alerts turn into trackable tasks instead of forgotten emails.<\/span><\/li>\r\n              <li><svg viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2.4\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M20 6L9 17l-5-5\"\/><\/svg><span><b>One picture for everyone:<\/b> threats, incidents and risks in one consistent view for specialists and leadership.<\/span><\/li>\r\n            <\/ul>\r\n          <\/div>\r\n        <\/div>\r\n      <\/div>\r\n    <\/div>\r\n  <\/div>\r\n\r\n<script>\r\n(function(){\r\n  var root=document.getElementById('sgdora-saeulen');\r\n  if(!root) return;\r\n  var list=root.querySelector('.sgd-pillar-list');\r\n  var detail=root.querySelector('.sgd-detail');\r\n  var tabs=[].slice.call(root.querySelectorAll('.sgd-pillar'));\r\n  var panels=[].slice.call(root.querySelectorAll('.sgd-detail-panel'));\r\n  var mq=window.matchMedia('(max-width: 960px)');\r\n  var mobileBuilt=false, cards=[], dotsWrap=null, hint=null, extras=[];\r\n\r\n  function selectDesktop(t){\r\n    tabs.forEach(function(x){x.setAttribute('aria-selected','false');});\r\n    panels.forEach(function(p){p.classList.remove('sgd-on');});\r\n    t.setAttribute('aria-selected','true');\r\n    var p=root.querySelector('#'+t.getAttribute('data-panel'));\r\n    if(p) p.classList.add('sgd-on');\r\n  }\r\n\r\n  function buildMobile(){\r\n    cards=[];\r\n    tabs.forEach(function(t){\r\n      var panel=root.querySelector('#'+t.getAttribute('data-panel'));\r\n      var card=document.createElement('div');\r\n      card.className='sgd-card';\r\n      var wrap=document.createElement('div');\r\n      wrap.className='sgd-detail';\r\n      wrap.appendChild(panel);\r\n      panel.classList.add('sgd-on');\r\n      card.appendChild(t);\r\n      card.appendChild(wrap);\r\n      list.appendChild(card);\r\n      cards.push(card);\r\n    });\r\n    \/\/ Punkte-Indikator\r\n    dotsWrap=document.createElement('div');\r\n    dotsWrap.className='sgd-dots';\r\n    cards.forEach(function(c,i){\r\n      var d=document.createElement('button');\r\n      d.type='button';\r\n      d.setAttribute('aria-label','Pillar '+(i+1));\r\n      d.setAttribute('aria-current', i===0?'true':'false');\r\n      d.addEventListener('click',function(){\r\n        cards[i].scrollIntoView({behavior:'smooth', block:'nearest', inline:'center'});\r\n      });\r\n      dotsWrap.appendChild(d);\r\n    });\r\n    \/\/ Wisch-Hinweis\r\n    hint=document.createElement('div');\r\n    hint.className='sgd-swipe-hint';\r\n    hint.innerHTML='<svg viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><path d=\"M8 12h13M8 12l4-4M8 12l4 4\"\/><path d=\"M3 6v12\"\/><\/svg><span>Swipe through all five pillars<\/span>';\r\n    var expl=root.querySelector('.sgd-explorer');\r\n    expl.parentNode.insertBefore(hint, expl.nextSibling);\r\n    expl.parentNode.insertBefore(dotsWrap, hint.nextSibling);\r\n    extras=[dotsWrap, hint];\r\n\r\n    \/\/ Dots bei Scroll aktualisieren\r\n    var raf=null;\r\n    list.addEventListener('scroll',function(){\r\n      if(raf) return;\r\n      raf=requestAnimationFrame(function(){\r\n        raf=null;\r\n        var center=list.scrollLeft + list.clientWidth\/2;\r\n        var best=0, bestd=1e9;\r\n        cards.forEach(function(c,i){\r\n          var mid=c.offsetLeft + c.offsetWidth\/2;\r\n          var d=Math.abs(mid-center);\r\n          if(d<bestd){bestd=d; best=i;}\r\n        });\r\n        [].forEach.call(dotsWrap.children,function(dot,i){\r\n          dot.setAttribute('aria-current', i===best?'true':'false');\r\n        });\r\n      });\r\n    },{passive:true});\r\n    mobileBuilt=true;\r\n  }\r\n\r\n  function teardownMobile(){\r\n    \/\/ Panels zurueck in den Desktop-Container, Extras entfernen\r\n    panels.forEach(function(p){ detail.appendChild(p); p.classList.remove('sgd-on'); });\r\n    cards.forEach(function(c){ if(c.parentNode) c.parentNode.removeChild(c); });\r\n    extras.forEach(function(e){ if(e && e.parentNode) e.parentNode.removeChild(e); });\r\n    cards=[]; extras=[]; dotsWrap=null; hint=null; mobileBuilt=false;\r\n  }\r\n\r\n  tabs.forEach(function(t){\r\n    t.addEventListener('click',function(){ if(!mq.matches) selectDesktop(t); });\r\n  });\r\n\r\n  function sync(){\r\n    if(mq.matches){\r\n      root.classList.add('sgd-is-mobile');\r\n      if(!mobileBuilt) buildMobile();\r\n    } else {\r\n      root.classList.remove('sgd-is-mobile');\r\n      if(mobileBuilt) teardownMobile();\r\n      selectDesktop(tabs[0]);\r\n    }\r\n  }\r\n  sync();\r\n  mq.addEventListener && mq.addEventListener('change', sync);\r\n})();\r\n<\/script>\r\n<\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-2aadb21 e-con-full e-flex e-con e-parent\" data-id=\"2aadb21\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-80b3108 elementor-widget elementor-widget-html\" data-id=\"80b3108\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"html.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div id=\"sgdora-loesung\">\r\n<style>\r\n.elementor-widget-html:has(#sgdora-loesung){margin-block:0 !important;}\r\n.elementor-widget-container:has(> #sgdora-loesung){margin:0 !important;padding:0 !important;background:transparent !important;}\r\n.elementor-element:has(> .elementor-widget-container > #sgdora-loesung){margin-block:0 !important;padding-block:0 !important;}\r\n.elementor-column:has(#sgdora-loesung) > .elementor-widget-wrap,\r\n.elementor-widget-wrap:has(#sgdora-loesung){padding:0 !important;}\r\n.e-con:has(#sgdora-loesung),.e-con-inner:has(#sgdora-loesung){margin-block:0 !important;padding-block:0 !important;--gap:0px !important;row-gap:0 !important;}\r\n\r\n#sgdora-loesung{\r\n  --sgd-navy:#1A2E4C; --sgd-blue:#3062a5; --sgd-teal:#17a2ac; --sgd-teal-bright:#2dc6cb;\r\n  --sgd-mint:#00bfad; --sgd-grey:#666666;\r\n  --sgd-font-head:'Anek Latin','Inter',system-ui,sans-serif;\r\n  --sgd-font-body:'Inter',system-ui,sans-serif;\r\n  font-family:var(--sgd-font-body); box-sizing:border-box; background:#F5F8FB; padding:88px 24px;\r\n}\r\n#sgdora-loesung *,#sgdora-loesung *::before,#sgdora-loesung *::after{box-sizing:inherit;}\r\n#sgdora-loesung .sgd-wrap{max-width:1200px; margin:0 auto;}\r\n#sgdora-loesung .sgd-head{max-width:760px; margin-bottom:48px;}\r\n#sgdora-loesung .sgd-eyebrow{display:inline-flex; align-items:center; gap:10px; font:600 13px\/1 var(--sgd-font-body);\r\n  letter-spacing:.14em; text-transform:uppercase; color:var(--sgd-teal); margin:0 0 14px;}\r\n#sgdora-loesung .sgd-eyebrow::before{content:\"\"; width:26px; height:2px; background:var(--sgd-teal); border-radius:2px;}\r\n#sgdora-loesung h2{overflow-wrap:break-word; font-family:var(--sgd-font-head); font-weight:700; font-size:clamp(28px,3.4vw,42px);\r\n  line-height:1.12; letter-spacing:-.01em; color:var(--sgd-navy); margin:0 0 16px;}\r\n#sgdora-loesung .sgd-sub{font-size:17px; line-height:1.7; color:var(--sgd-grey); margin:0;}\r\n\r\n#sgdora-loesung .sgd-cards{display:grid; grid-template-columns:repeat(3,minmax(0,1fr)); gap:18px;}\r\n#sgdora-loesung .sgd-card{position:relative; overflow:hidden; background:#fff; border:1px solid #E3EAF2;\r\n  border-radius:16px; padding:30px 28px 26px; display:flex; flex-direction:column;\r\n  transition:transform .22s ease, box-shadow .22s ease, border-color .22s ease;}\r\n#sgdora-loesung .sgd-card:hover{transform:translateY(-4px); box-shadow:0 18px 38px rgba(26,46,76,.1); border-color:#CBD9E8;}\r\n\r\n\/* accent *\/\r\n#sgdora-loesung .sgd-card::before{content:\"\"; position:absolute; top:0; left:0; right:0; height:4px;}\r\n#sgdora-loesung .sgd-card:nth-child(1)::before{background:linear-gradient(90deg,var(--sgd-blue),var(--sgd-teal-bright));}\r\n#sgdora-loesung .sgd-card:nth-child(2)::before{background:linear-gradient(90deg,var(--sgd-teal),var(--sgd-mint));}\r\n#sgdora-loesung .sgd-card:nth-child(3)::before{background:linear-gradient(90deg,var(--sgd-navy),var(--sgd-blue));}\r\n#sgdora-loesung .sgd-card:nth-child(4)::before{background:linear-gradient(90deg,var(--sgd-teal-bright),var(--sgd-blue));}\r\n#sgdora-loesung .sgd-card:nth-child(5)::before{background:linear-gradient(90deg,var(--sgd-mint),var(--sgd-teal));}\r\n#sgdora-loesung .sgd-card:nth-child(6)::before{background:linear-gradient(90deg,var(--sgd-blue),var(--sgd-navy));}\r\n\r\n#sgdora-loesung .sgd-num{font:700 15px\/1 var(--sgd-font-head); letter-spacing:.08em; margin-bottom:14px;}\r\n#sgdora-loesung .sgd-card:nth-child(1) .sgd-num{color:var(--sgd-blue);}\r\n#sgdora-loesung .sgd-card:nth-child(2) .sgd-num{color:var(--sgd-teal);}\r\n#sgdora-loesung .sgd-card:nth-child(3) .sgd-num{color:var(--sgd-navy);}\r\n#sgdora-loesung .sgd-card:nth-child(4) .sgd-num{color:var(--sgd-teal-bright);}\r\n#sgdora-loesung .sgd-card:nth-child(5) .sgd-num{color:var(--sgd-mint);}\r\n#sgdora-loesung .sgd-card:nth-child(6) .sgd-num{color:var(--sgd-blue);}\r\n#sgdora-loesung .sgd-num::after{content:\"\"; display:block; width:30px; height:1px; background:currentColor; opacity:.4; margin-top:10px;}\r\n\r\n#sgdora-loesung .sgd-card h3{margin:0 0 10px; font:600 19px\/1.3 var(--sgd-font-head); color:var(--sgd-navy);}\r\n#sgdora-loesung .sgd-card p{margin:0 0 18px; font:400 14.5px\/1.65 var(--sgd-font-body); color:var(--sgd-grey); flex:1;}\r\n#sgdora-loesung .sgd-tags{display:flex; flex-wrap:wrap; gap:7px;}\r\n#sgdora-loesung .sgd-tag{font:600 11px\/1 var(--sgd-font-body); letter-spacing:.04em; color:var(--sgd-blue);\r\n  background:rgba(48,98,165,.08); border:1px solid rgba(48,98,165,.18); border-radius:99px; padding:6px 11px;}\r\n\r\n@media (prefers-reduced-motion:reduce){ #sgdora-loesung .sgd-card{transition:none;} }\r\n@media (max-width:980px){ #sgdora-loesung .sgd-cards{grid-template-columns:repeat(2,minmax(0,1fr));} }\r\n@media (max-width:620px){\r\n  #sgdora-loesung{padding:60px 18px;}\r\n  #sgdora-loesung .sgd-cards{grid-template-columns:1fr;}\r\n}\r\n<\/style>\r\n\r\n  <div class=\"sgd-wrap\">\r\n    <div class=\"sgd-head\">\r\n      <p class=\"sgd-eyebrow\">The solution<\/p>\r\n      <h2>DORA compliance with the SwissGRC&#174;&nbsp;Platform<\/h2>\r\n      <p class=\"sgd-sub\">Six capabilities, one integrated data model. Every DORA requirement has a clear home in the SwissGRC&#174;&nbsp;Platform, and every home is connected to the others. That cuts duplicate work, and when supervisors ask, the answer is already there.<\/p>\r\n    <\/div>\r\n\r\n    <div class=\"sgd-cards\">\r\n      <div class=\"sgd-card\">\r\n        <div class=\"sgd-num\">01<\/div>\r\n        <h3>DORA Compliance Check<\/h3>\r\n        <p>Track the implementation of every requirement of Regulation (EU) 2022\/2554, including the associated RTS and ITS. Gaps become visible, measures are assigned, and progress stays transparent for the management body.<\/p>\r\n        <div class=\"sgd-tags\"><span class=\"sgd-tag\">Gap analysis<\/span><span class=\"sgd-tag\">Measure tracking<\/span><\/div>\r\n      <\/div>\r\n\r\n      <div class=\"sgd-card\">\r\n        <div class=\"sgd-num\">02<\/div>\r\n        <h3>ICT risk management &amp; ISMS<\/h3>\r\n        <p>Inventory and interlink your entire IT ecosystem. Identify, assess and monitor ICT risks in an integrated ISMS and take well-founded decisions to improve your security posture.<\/p>\r\n        <div class=\"sgd-tags\"><span class=\"sgd-tag\">Pillar 1<\/span><span class=\"sgd-tag\">Protected assets<\/span><span class=\"sgd-tag\">Risk matrix<\/span><\/div>\r\n      <\/div>\r\n\r\n      <div class=\"sgd-card\">\r\n        <div class=\"sgd-num\">03<\/div>\r\n        <h3>Register of information under DORA<\/h3>\r\n        <p>Build and maintain the register of all contractual arrangements with ICT third-party providers: structured capture, regular updates and complete traceability, ready for the annual submission.<\/p>\r\n        <div class=\"sgd-tags\"><span class=\"sgd-tag\">Pillar 4<\/span><span class=\"sgd-tag\">Annual submission<\/span><span class=\"sgd-tag\">Data quality<\/span><\/div>\r\n      <\/div>\r\n\r\n      <div class=\"sgd-card\">\r\n        <div class=\"sgd-num\">04<\/div>\r\n        <h3>Incident management<\/h3>\r\n        <p>Detect, classify and report incidents in line with DORA. Seamlessly integrated with risk management, covering the full cause, event and impact chain through to the final report.<\/p>\r\n        <div class=\"sgd-tags\"><span class=\"sgd-tag\">Pillar 2<\/span><span class=\"sgd-tag\">Reporting deadlines<\/span><span class=\"sgd-tag\">Root cause analysis<\/span><\/div>\r\n      <\/div>\r\n\r\n      <div class=\"sgd-card\">\r\n        <div class=\"sgd-num\">05<\/div>\r\n        <h3>Business continuity management<\/h3>\r\n        <p>Plan and test contingency measures so your organisation keeps operating even in a crisis. Test results feed straight back into risks and measures and strengthen your resilience over time.<\/p>\r\n        <div class=\"sgd-tags\"><span class=\"sgd-tag\">Pillar 3<\/span><span class=\"sgd-tag\">Contingency plans<\/span><\/div>\r\n      <\/div>\r\n\r\n      <div class=\"sgd-card\">\r\n        <div class=\"sgd-num\">06<\/div>\r\n        <h3>Third-party risk management<\/h3>\r\n        <p>Take a data-centred approach to all ICT third-party risk: due diligence, ongoing monitoring, concentration risk and exit strategies, including your dependencies on critical providers under ESA oversight.<\/p>\r\n        <div class=\"sgd-tags\"><span class=\"sgd-tag\">Pillar 4<\/span><span class=\"sgd-tag\">CTPP dependencies<\/span><span class=\"sgd-tag\">Exit strategies<\/span><\/div>\r\n      <\/div>\r\n    <\/div>\r\n  <\/div>\r\n<\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-00a8dbd e-con-full e-flex e-con e-parent\" data-id=\"00a8dbd\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-64808d5 elementor-widget elementor-widget-html\" data-id=\"64808d5\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"html.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div id=\"sgdora-readiness\">\r\n<style>\r\n.elementor-widget-html:has(#sgdora-readiness){margin-block:0 !important;}\r\n.elementor-widget-container:has(> #sgdora-readiness){margin:0 !important;padding:0 !important;background:transparent !important;}\r\n.elementor-element:has(> .elementor-widget-container > #sgdora-readiness){margin-block:0 !important;padding-block:0 !important;}\r\n.elementor-column:has(#sgdora-readiness) > .elementor-widget-wrap,\r\n.elementor-widget-wrap:has(#sgdora-readiness){padding:0 !important;}\r\n.e-con:has(#sgdora-readiness),.e-con-inner:has(#sgdora-readiness){margin-block:0 !important;padding-block:0 !important;--gap:0px !important;row-gap:0 !important;}\r\n\r\n#sgdora-readiness{\r\n  --sgd-navy:#1A2E4C; --sgd-navy-deep:#122238; --sgd-blue:#3062a5; --sgd-teal:#17a2ac;\r\n  --sgd-teal-bright:#2dc6cb; --sgd-mint:#00bfad; --sgd-magenta:#B82850; --sgd-grey:#666666;\r\n  --sgd-font-head:'Anek Latin','Inter',system-ui,sans-serif;\r\n  --sgd-font-body:'Inter',system-ui,sans-serif;\r\n  font-family:var(--sgd-font-body); box-sizing:border-box; color:#fff;\r\n  background:\r\n    radial-gradient(900px 500px at 15% 0%, rgba(48,98,165,.3), transparent 60%),\r\n    radial-gradient(800px 500px at 95% 100%, rgba(0,191,173,.14), transparent 60%),\r\n    linear-gradient(165deg, var(--sgd-navy) 0%, var(--sgd-navy-deep) 100%);\r\n  padding:88px 24px;\r\n}\r\n#sgdora-readiness *,#sgdora-readiness *::before,#sgdora-readiness *::after{box-sizing:inherit;}\r\n#sgdora-readiness .sgd-wrap{max-width:1060px; margin:0 auto;}\r\n#sgdora-readiness .sgd-eyebrow{display:inline-flex; align-items:center; gap:10px; font:600 13px\/1 var(--sgd-font-body);\r\n  letter-spacing:.14em; text-transform:uppercase; color:var(--sgd-teal-bright); margin:0 0 14px;}\r\n#sgdora-readiness .sgd-eyebrow::before{content:\"\"; width:26px; height:2px; background:var(--sgd-teal-bright); border-radius:2px;}\r\n#sgdora-readiness h2{font-family:var(--sgd-font-head); font-weight:700; font-size:clamp(28px,3.4vw,42px);\r\n  line-height:1.12; letter-spacing:-.01em; color:#fff; margin:0 0 14px;}\r\n#sgdora-readiness .sgd-sub{font-size:16.5px; line-height:1.7; color:rgba(255,255,255,.78); max-width:64ch; margin:0 0 40px;}\r\n\r\n#sgdora-readiness .sgd-quiz{background:rgba(255,255,255,.05); border:1px solid rgba(255,255,255,.14);\r\n  border-radius:18px; padding:34px 38px; backdrop-filter:blur(4px);}\r\n#sgdora-readiness .sgd-progress{display:flex; align-items:center; gap:14px; margin-bottom:26px;}\r\n#sgdora-readiness .sgd-bar{flex:1; height:6px; background:rgba(255,255,255,.12); border-radius:6px; overflow:hidden;}\r\n#sgdora-readiness .sgd-bar i{display:block; height:100%; width:0%; background:linear-gradient(90deg,var(--sgd-teal),var(--sgd-mint));\r\n  border-radius:6px; transition:width .35s ease;}\r\n#sgdora-readiness .sgd-prog-label{font:600 12.5px\/1 var(--sgd-font-body); color:rgba(255,255,255,.65); white-space:nowrap;}\r\n\r\n#sgdora-readiness .sgd-q{display:none; animation:sgd-fade-r .3s ease;}\r\n#sgdora-readiness .sgd-q.sgd-on{display:block;}\r\n@keyframes sgd-fade-r{from{opacity:0; transform:translateY(8px)} to{opacity:1; transform:none}}\r\n#sgdora-readiness .sgd-q-cat{display:inline-block; font:600 11px\/1 var(--sgd-font-body); letter-spacing:.1em;\r\n  text-transform:uppercase; color:var(--sgd-mint); background:rgba(0,191,173,.12);\r\n  border:1px solid rgba(0,191,173,.3); border-radius:99px; padding:6px 12px; margin-bottom:14px;}\r\n#sgdora-readiness .sgd-q h3{margin:0 0 22px; font:600 22px\/1.4 var(--sgd-font-head); color:#fff; max-width:60ch;}\r\n#sgdora-readiness .sgd-opts{display:grid; gap:10px;}\r\n#sgdora-readiness .sgd-opt{display:flex; align-items:center; gap:14px; width:100%; text-align:left;\r\n  background:rgba(255,255,255,.05); border:1px solid rgba(255,255,255,.16); border-radius:12px;\r\n  padding:16px 18px; cursor:pointer; font:500 15px\/1.45 var(--sgd-font-body); color:rgba(255,255,255,.9);\r\n  transition:border-color .18s ease, background .18s ease, transform .18s ease; -webkit-tap-highlight-color:transparent;}\r\n#sgdora-readiness .sgd-opt:hover{border-color:var(--sgd-teal-bright); background:rgba(45,198,203,.08); transform:translateX(3px);}\r\n#sgdora-readiness .sgd-opt:focus-visible{outline:2px solid var(--sgd-teal-bright); outline-offset:3px;}\r\n#sgdora-readiness .sgd-opt i{width:20px; height:20px; border-radius:50%; border:2px solid rgba(255,255,255,.35); flex:0 0 auto;}\r\n\r\n\/* Ergebnis *\/\r\n#sgdora-readiness .sgd-result{display:none; animation:sgd-fade-r .4s ease;}\r\n#sgdora-readiness .sgd-result.sgd-on{display:grid; grid-template-columns:auto 1fr; gap:34px; align-items:center;}\r\n#sgdora-readiness .sgd-gauge{position:relative; width:170px; height:170px;}\r\n#sgdora-readiness .sgd-gauge svg{width:170px; height:170px; transform:rotate(-90deg);}\r\n#sgdora-readiness .sgd-gauge circle{fill:none; stroke-width:12; stroke-linecap:round;}\r\n#sgdora-readiness .sgd-gauge .sgd-g-bg{stroke:rgba(255,255,255,.1);}\r\n#sgdora-readiness .sgd-gauge .sgd-g-val{stroke:var(--sgd-mint); stroke-dasharray:439.8; stroke-dashoffset:439.8;\r\n  transition:stroke-dashoffset 1.4s cubic-bezier(.25,.7,.3,1), stroke .4s ease;}\r\n#sgdora-readiness .sgd-gauge-label{position:absolute; inset:0; display:flex; flex-direction:column; align-items:center; justify-content:center;}\r\n#sgdora-readiness .sgd-gauge-label b{font:700 40px\/1 var(--sgd-font-head); color:#fff;}\r\n#sgdora-readiness .sgd-gauge-label span{font:500 11.5px\/1.3 var(--sgd-font-body); color:rgba(255,255,255,.6); margin-top:5px;}\r\n#sgdora-readiness .sgd-result h3{margin:0 0 10px; font:600 24px\/1.3 var(--sgd-font-head); color:#fff;}\r\n#sgdora-readiness .sgd-result p{margin:0 0 20px; font:400 15px\/1.7 var(--sgd-font-body); color:rgba(255,255,255,.82); max-width:65ch;}\r\n#sgdora-readiness .sgd-res-cta{display:flex; flex-wrap:wrap; gap:12px;}\r\n#sgdora-readiness .sgd-btn{display:inline-flex; align-items:center; gap:9px; text-decoration:none; border:0; cursor:pointer;\r\n  font:600 15px\/1 var(--sgd-font-body); border-radius:10px; padding:14px 24px;\r\n  transition:transform .18s ease, box-shadow .18s ease;}\r\n#sgdora-readiness .sgd-btn-primary{background:linear-gradient(135deg,#17a2ac 0%,#00bfad 100%); color:#fff; box-shadow:0 8px 24px rgba(23,162,172,.38);}\r\n#sgdora-readiness .sgd-btn-primary:hover{transform:translateY(-2px); box-shadow:0 12px 30px rgba(23,162,172,.5); color:#fff;}\r\n#sgdora-readiness .sgd-btn-ghost{background:rgba(255,255,255,.08); color:#fff; border:1px solid rgba(255,255,255,.25);}\r\n#sgdora-readiness .sgd-btn-ghost:hover{background:rgba(255,255,255,.14); color:#fff;}\r\n#sgdora-readiness .sgd-note{margin-top:22px; font:400 12px\/1.6 var(--sgd-font-body); color:rgba(255,255,255,.45); max-width:80ch;}\r\n\r\n@media (prefers-reduced-motion:reduce){\r\n  #sgdora-readiness .sgd-q,#sgdora-readiness .sgd-result{animation:none;}\r\n  #sgdora-readiness .sgd-gauge .sgd-g-val,#sgdora-readiness .sgd-bar i,#sgdora-readiness .sgd-opt{transition:none;}\r\n}\r\n@media (max-width:760px){\r\n  #sgdora-readiness{padding:60px 18px;}\r\n  #sgdora-readiness .sgd-quiz{padding:24px 20px;}\r\n  #sgdora-readiness .sgd-result.sgd-on{grid-template-columns:1fr; justify-items:center; text-align:center;}\r\n  #sgdora-readiness .sgd-result h3,#sgdora-readiness .sgd-result p{text-align:left;}\r\n  #sgdora-readiness .sgd-res-cta{justify-content:center;}\r\n  #sgdora-readiness .sgd-btn{width:100%; justify-content:center;}\r\n}\r\n<\/style>\r\n\r\n  <div class=\"sgd-wrap\">\r\n    <p class=\"sgd-eyebrow\">Interactive \u00b7 2 minutes<\/p>\r\n    <h2>How DORA-ready is your organisation?<\/h2>\r\n    <p class=\"sgd-sub\">Six questions along the supervisory examination priorities. You get an assessment right away, anonymous and with no sign-up.<\/p>\r\n\r\n    <div class=\"sgd-quiz\">\r\n      <div class=\"sgd-progress\" aria-hidden=\"true\">\r\n        <div class=\"sgd-bar\"><i><\/i><\/div>\r\n        <span class=\"sgd-prog-label\">Question <b class=\"sgd-cur\">1<\/b> \/ 6<\/span>\r\n      <\/div>\r\n\r\n      <div class=\"sgd-q sgd-on\" data-q=\"1\">\r\n        <span class=\"sgd-q-cat\">Register of information<\/span>\r\n        <h3>How do you maintain your register of information on ICT third-party providers?<\/h3>\r\n        <div class=\"sgd-opts\">\r\n          <button class=\"sgd-opt\" data-score=\"0\"><i aria-hidden=\"true\"><\/i>We do not yet have a complete register.<\/button>\r\n          <button class=\"sgd-opt\" data-score=\"1\"><i aria-hidden=\"true\"><\/i>In Excel sheets, maintained manually and in different places.<\/button>\r\n          <button class=\"sgd-opt\" data-score=\"2\"><i aria-hidden=\"true\"><\/i>In a central tool, but not linked to risks and contracts.<\/button>\r\n          <button class=\"sgd-opt\" data-score=\"3\"><i aria-hidden=\"true\"><\/i>Central, current and linked to risks, contracts and functions.<\/button>\r\n        <\/div>\r\n      <\/div>\r\n\r\n      <div class=\"sgd-q\" data-q=\"2\">\r\n        <span class=\"sgd-q-cat\">Incident reporting<\/span>\r\n        <h3>Could you report a major ICT incident to your supervisor within four hours of classification?<\/h3>\r\n        <div class=\"sgd-opts\">\r\n          <button class=\"sgd-opt\" data-score=\"0\"><i aria-hidden=\"true\"><\/i>No, our reporting process is not defined.<\/button>\r\n          <button class=\"sgd-opt\" data-score=\"1\"><i aria-hidden=\"true\"><\/i>The process exists on paper but has never been rehearsed.<\/button>\r\n          <button class=\"sgd-opt\" data-score=\"2\"><i aria-hidden=\"true\"><\/i>Yes, but with a lot of manual work and uncertainty about the content.<\/button>\r\n          <button class=\"sgd-opt\" data-score=\"3\"><i aria-hidden=\"true\"><\/i>Yes, the process is tool-supported, rehearsed and backed by clear roles.<\/button>\r\n        <\/div>\r\n      <\/div>\r\n\r\n      <div class=\"sgd-q\" data-q=\"3\">\r\n        <span class=\"sgd-q-cat\">Third-party risk<\/span>\r\n        <h3>Do you know your dependencies on the 19 critical ICT third-party providers under ESA oversight?<\/h3>\r\n        <div class=\"sgd-opts\">\r\n          <button class=\"sgd-opt\" data-score=\"0\"><i aria-hidden=\"true\"><\/i>We have not looked into this yet.<\/button>\r\n          <button class=\"sgd-opt\" data-score=\"1\"><i aria-hidden=\"true\"><\/i>Roughly, but without a systematic assessment of concentration risk.<\/button>\r\n          <button class=\"sgd-opt\" data-score=\"2\"><i aria-hidden=\"true\"><\/i>Yes, dependencies are documented; some exit strategies are missing.<\/button>\r\n          <button class=\"sgd-opt\" data-score=\"3\"><i aria-hidden=\"true\"><\/i>Yes, including assessed concentration risks and exit strategies.<\/button>\r\n        <\/div>\r\n      <\/div>\r\n\r\n      <div class=\"sgd-q\" data-q=\"4\">\r\n        <span class=\"sgd-q-cat\">ICT risk management<\/span>\r\n        <h3>How closely are your ICT inventory, risks and controls linked to each other?<\/h3>\r\n        <div class=\"sgd-opts\">\r\n          <button class=\"sgd-opt\" data-score=\"0\"><i aria-hidden=\"true\"><\/i>There is no maintained ICT inventory.<\/button>\r\n          <button class=\"sgd-opt\" data-score=\"1\"><i aria-hidden=\"true\"><\/i>Inventory, risks and controls sit in separate lists.<\/button>\r\n          <button class=\"sgd-opt\" data-score=\"2\"><i aria-hidden=\"true\"><\/i>Partly linked, but not consistently up to date.<\/button>\r\n          <button class=\"sgd-opt\" data-score=\"3\"><i aria-hidden=\"true\"><\/i>Fully connected in one system, continuously updated.<\/button>\r\n        <\/div>\r\n      <\/div>\r\n\r\n      <div class=\"sgd-q\" data-q=\"5\">\r\n        <span class=\"sgd-q-cat\">Resilience testing<\/span>\r\n        <h3>How systematically do you test your digital operational resilience?<\/h3>\r\n        <div class=\"sgd-opts\">\r\n          <button class=\"sgd-opt\" data-score=\"0\"><i aria-hidden=\"true\"><\/i>Not at all so far, or only when something happens.<\/button>\r\n          <button class=\"sgd-opt\" data-score=\"1\"><i aria-hidden=\"true\"><\/i>Occasional tests; results are not tracked centrally.<\/button>\r\n          <button class=\"sgd-opt\" data-score=\"2\"><i aria-hidden=\"true\"><\/i>Regular tests, but some findings fizzle out.<\/button>\r\n          <button class=\"sgd-opt\" data-score=\"3\"><i aria-hidden=\"true\"><\/i>A test programme with planning, follow-up and measure tracking.<\/button>\r\n        <\/div>\r\n      <\/div>\r\n\r\n      <div class=\"sgd-q\" data-q=\"6\">\r\n        <span class=\"sgd-q-cat\">Governance<\/span>\r\n        <h3>Does your management body receive reliable reports on DORA implementation on a regular basis?<\/h3>\r\n        <div class=\"sgd-opts\">\r\n          <button class=\"sgd-opt\" data-score=\"0\"><i aria-hidden=\"true\"><\/i>No, the topic is not anchored at leadership level.<\/button>\r\n          <button class=\"sgd-opt\" data-score=\"1\"><i aria-hidden=\"true\"><\/i>Only on request, and with a lot of manual effort.<\/button>\r\n          <button class=\"sgd-opt\" data-score=\"2\"><i aria-hidden=\"true\"><\/i>Regularly, but the underlying data is fragmented.<\/button>\r\n          <button class=\"sgd-opt\" data-score=\"3\"><i aria-hidden=\"true\"><\/i>Regularly, at the push of a button, from one consistent data set.<\/button>\r\n        <\/div>\r\n      <\/div>\r\n\r\n      <div class=\"sgd-result\" aria-live=\"polite\">\r\n        <div class=\"sgd-gauge\">\r\n          <svg viewBox=\"0 0 160 160\" aria-hidden=\"true\">\r\n            <circle class=\"sgd-g-bg\" cx=\"80\" cy=\"80\" r=\"70\"><\/circle>\r\n            <circle class=\"sgd-g-val\" cx=\"80\" cy=\"80\" r=\"70\"><\/circle>\r\n          <\/svg>\r\n          <div class=\"sgd-gauge-label\"><b class=\"sgd-score-num\">0<\/b><span>out of 100 points<\/span><\/div>\r\n        <\/div>\r\n        <div>\r\n          <h3 class=\"sgd-res-title\"><\/h3>\r\n          <p class=\"sgd-res-text\"><\/p>\r\n          <div class=\"sgd-res-cta\">\r\n            <a class=\"sgd-btn sgd-btn-primary\" href=\"#sgdora-cta\">Request a demo<\/a>\r\n            <button class=\"sgd-btn sgd-btn-ghost\" type=\"button\" data-restart>Repeat the check<\/button>\r\n          <\/div>\r\n        <\/div>\r\n      <\/div>\r\n    <\/div>\r\n    <p class=\"sgd-note\">The readiness check is a non-binding self-assessment and does not replace regulatory advice. No answers are stored or transmitted.<\/p>\r\n  <\/div>\r\n\r\n<script>\r\n(function(){\r\n  var root=document.getElementById('sgdora-readiness');\r\n  if(!root) return;\r\n  var qs=[].slice.call(root.querySelectorAll('.sgd-q'));\r\n  var bar=root.querySelector('.sgd-bar i');\r\n  var cur=root.querySelector('.sgd-cur');\r\n  var result=root.querySelector('.sgd-result');\r\n  var progress=root.querySelector('.sgd-progress');\r\n  var total=qs.length, idx=0, score=0;\r\n\r\n  function show(i){\r\n    qs.forEach(function(q){q.classList.remove('sgd-on');});\r\n    qs[i].classList.add('sgd-on');\r\n    cur.textContent=i+1;\r\n    bar.style.width=((i)\/total*100)+'%';\r\n  }\r\n\r\n  function finish(){\r\n    qs.forEach(function(q){q.classList.remove('sgd-on');});\r\n    progress.style.display='none';\r\n    result.classList.add('sgd-on');\r\n    var pct=Math.round(score\/(total*3)*100);\r\n    var gauge=root.querySelector('.sgd-g-val');\r\n    var num=root.querySelector('.sgd-score-num');\r\n    var title=root.querySelector('.sgd-res-title');\r\n    var text=root.querySelector('.sgd-res-text');\r\n    var color, t, x;\r\n    if(pct<40){ color='#B82850'; t='Action needed: supervisors are moving faster than your processes.';\r\n      x='Core DORA requirements such as the register of information, reporting processes or third-party assessments are not yet reliably in place at your organisation. The good news: with a structured, tool-supported approach you catch up faster than you might think. We are happy to show you how other financial entities got started.'; }\r\n    else if(pct<75){ color='#f0b429'; t='A solid base, but the gaps sit exactly where supervisors look.';\r\n      x='You have laid important groundwork. Fragmented data, manual registers or untested reporting processes, however, are typical findings in supervisory examinations. An integrated platform closes these gaps and noticeably reduces your ongoing effort.'; }\r\n    else { color='#00bfad'; t='Strong. Now it is about efficiency and evidence.';\r\n      x='Your DORA implementation stands on a solid foundation. The next step: cut effort, keep data quality high for good and stay audit-ready at all times. This is exactly where the SwissGRC\u00ae Platform plays to its strengths. Compare your approach with ours in a demo.'; }\r\n    title.textContent=t; text.textContent=x;\r\n    gauge.style.stroke=color;\r\n    var C=439.8;\r\n    requestAnimationFrame(function(){ gauge.style.strokeDashoffset=(C-(C*pct\/100)).toFixed(1); });\r\n    var reduce=window.matchMedia&&window.matchMedia('(prefers-reduced-motion: reduce)').matches;\r\n    if(reduce){ num.textContent=pct; return; }\r\n    var t0=null;\r\n    function step(ts){ if(!t0)t0=ts; var p=Math.min((ts-t0)\/1300,1);\r\n      num.textContent=Math.round(pct*(1-Math.pow(1-p,3)));\r\n      if(p<1) requestAnimationFrame(step); }\r\n    requestAnimationFrame(step);\r\n  }\r\n\r\n  root.querySelectorAll('.sgd-opt').forEach(function(btn){\r\n    btn.addEventListener('click',function(){\r\n      score+=parseInt(btn.getAttribute('data-score'),10)||0;\r\n      idx++;\r\n      if(idx<total){ show(idx); } else { finish(); }\r\n    });\r\n  });\r\n\r\n  root.querySelector('[data-restart]').addEventListener('click',function(){\r\n    idx=0; score=0;\r\n    result.classList.remove('sgd-on');\r\n    progress.style.display='';\r\n    var g=root.querySelector('.sgd-g-val'); g.style.strokeDashoffset='439.8';\r\n    show(0);\r\n  });\r\n\r\n  show(0);\r\n})();\r\n<\/script>\r\n<\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-c4b78ad e-con-full e-flex e-con e-parent\" data-id=\"c4b78ad\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-15230a1 elementor-widget elementor-widget-html\" data-id=\"15230a1\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"html.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div id=\"sgdora-faq\">\r\n<style>\r\n.elementor-widget-html:has(#sgdora-faq){margin-block:0 !important;}\r\n.elementor-widget-container:has(> #sgdora-faq){margin:0 !important;padding:0 !important;background:transparent !important;}\r\n.elementor-element:has(> .elementor-widget-container > #sgdora-faq){margin-block:0 !important;padding-block:0 !important;}\r\n.elementor-column:has(#sgdora-faq) > .elementor-widget-wrap,\r\n.elementor-widget-wrap:has(#sgdora-faq){padding:0 !important;}\r\n.e-con:has(#sgdora-faq),.e-con-inner:has(#sgdora-faq){margin-block:0 !important;padding-block:0 !important;--gap:0px !important;row-gap:0 !important;}\r\n\r\n#sgdora-faq{\r\n  --sgd-navy:#1A2E4C; --sgd-blue:#3062a5; --sgd-teal:#17a2ac; --sgd-mint:#00bfad;\r\n  --sgd-magenta:#B82850; --sgd-grey:#666666;\r\n  --sgd-font-head:'Anek Latin','Inter',system-ui,sans-serif;\r\n  --sgd-font-body:'Inter',system-ui,sans-serif;\r\n  font-family:var(--sgd-font-body); box-sizing:border-box; background:#F5F8FB; padding:88px 24px;\r\n}\r\n#sgdora-faq *,#sgdora-faq *::before,#sgdora-faq *::after{box-sizing:inherit;}\r\n#sgdora-faq .sgd-wrap{max-width:900px; margin:0 auto;}\r\n#sgdora-faq .sgd-eyebrow{display:inline-flex; align-items:center; gap:10px; font:600 13px\/1 var(--sgd-font-body);\r\n  letter-spacing:.14em; text-transform:uppercase; color:var(--sgd-teal); margin:0 0 14px;}\r\n#sgdora-faq .sgd-eyebrow::before{content:\"\"; width:26px; height:2px; background:var(--sgd-teal); border-radius:2px;}\r\n#sgdora-faq h2{font-family:var(--sgd-font-head); font-weight:700; font-size:clamp(28px,3.4vw,40px);\r\n  line-height:1.12; letter-spacing:-.01em; color:var(--sgd-navy); margin:0 0 14px;}\r\n#sgdora-faq .sgd-sub{font-size:16.5px; line-height:1.7; color:var(--sgd-grey); margin:0 0 40px; max-width:66ch;}\r\n\r\n#sgdora-faq .sgd-acc{display:grid; gap:12px;}\r\n#sgdora-faq details{background:#fff; border:1px solid #E3EAF2; border-radius:14px; overflow:hidden;\r\n  transition:box-shadow .2s ease, border-color .2s ease;}\r\n#sgdora-faq details[open]{border-color:var(--sgd-teal); box-shadow:0 12px 30px rgba(23,162,172,.1);}\r\n#sgdora-faq summary{display:flex; align-items:center; justify-content:space-between; gap:16px;\r\n  cursor:pointer; list-style:none; padding:20px 24px;\r\n  font:600 16.5px\/1.4 var(--sgd-font-head); color:var(--sgd-navy); -webkit-tap-highlight-color:transparent;}\r\n#sgdora-faq summary::-webkit-details-marker{display:none;}\r\n#sgdora-faq summary:focus-visible{outline:2px solid var(--sgd-teal); outline-offset:-2px; border-radius:14px;}\r\n#sgdora-faq summary .sgd-chev{flex:0 0 auto; width:30px; height:30px; border-radius:9px; background:#F1F6FA;\r\n  display:grid; place-items:center; transition:transform .25s ease, background .25s ease;}\r\n#sgdora-faq summary .sgd-chev svg{width:15px; height:15px; color:var(--sgd-blue);}\r\n#sgdora-faq details[open] summary .sgd-chev{transform:rotate(180deg); background:rgba(23,162,172,.12);}\r\n#sgdora-faq details[open] summary .sgd-chev svg{color:var(--sgd-teal);}\r\n#sgdora-faq .sgd-a{padding:0 24px 24px; font:400 15px\/1.75 var(--sgd-font-body); color:#42536b;}\r\n#sgdora-faq .sgd-a p{margin:0 0 12px;} #sgdora-faq .sgd-a p:last-child{margin:0;}\r\n#sgdora-faq .sgd-a ul{margin:0 0 12px; padding-left:20px;}\r\n#sgdora-faq .sgd-a li{margin-bottom:7px;}\r\n#sgdora-faq .sgd-a b{color:var(--sgd-navy);}\r\n\r\n@media (prefers-reduced-motion:reduce){ #sgdora-faq summary .sgd-chev{transition:none;} }\r\n@media (max-width:560px){\r\n  #sgdora-faq{padding:60px 18px;}\r\n  #sgdora-faq summary{padding:17px 18px; font-size:15.5px;}\r\n  #sgdora-faq .sgd-a{padding:0 18px 20px;}\r\n}\r\n<\/style>\r\n\r\n  <div class=\"sgd-wrap\">\r\n    <p class=\"sgd-eyebrow\">Frequently asked questions<\/p>\r\n    <h2>Understanding DORA, as of 2026<\/h2>\r\n    <p class=\"sgd-sub\">The key questions on the Digital Operational Resilience Act, updated with the latest developments: from CTPP oversight to the annual submission of the register of information.<\/p>\r\n\r\n    <div class=\"sgd-acc\">\r\n      <details open>\r\n        <summary>What is the Digital Operational Resilience Act (DORA)?<span class=\"sgd-chev\"><svg viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2.6\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M6 9l6 6 6-6\"\/><\/svg><\/span><\/summary>\r\n        <div class=\"sgd-a\">\r\n          <p>DORA is Regulation (EU) 2022\/2554. It entered into force on 16 January 2023 and has applied since 17 January 2025. It harmonises digital operational resilience requirements for around 20 types of financial entities in the EU, from banks and insurers to payment institutions and crypto-asset service providers, and brings ICT third-party providers directly into scope.<\/p>\r\n          <p>The goal: the European financial sector should be able to detect, manage and recover from severe digital disruption without putting the stability of the financial system at risk.<\/p>\r\n        <\/div>\r\n      <\/details>\r\n\r\n      <details>\r\n        <summary>What are the five pillars of DORA?<span class=\"sgd-chev\"><svg viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2.6\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M6 9l6 6 6-6\"\/><\/svg><\/span><\/summary>\r\n        <div class=\"sgd-a\">\r\n          <ul>\r\n            <li><b>ICT risk management:<\/b> a documented framework to identify, assess, manage and monitor ICT risk.<\/li>\r\n            <li><b>Incident management and reporting:<\/b> major ICT incidents are classified and reported to the competent authority within the deadlines.<\/li>\r\n            <li><b>Digital resilience testing:<\/b> regular testing, up to threat-led penetration testing (TLPT) for significant institutions.<\/li>\r\n            <li><b>ICT third-party risk management:<\/b> including the register of information, minimum contract content, concentration risk and exit strategies.<\/li>\r\n            <li><b>Information sharing:<\/b> voluntary exchange of cyber threat intelligence between financial entities.<\/li>\r\n          <\/ul>\r\n        <\/div>\r\n      <\/details>\r\n\r\n      <details>\r\n        <summary>What changed with the CTPP list of November 2025?<span class=\"sgd-chev\"><svg viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2.6\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M6 9l6 6 6-6\"\/><\/svg><\/span><\/summary>\r\n        <div class=\"sgd-a\">\r\n          <p>On 18 November 2025, the European supervisory authorities EBA, ESMA and EIOPA designated 19 ICT third-party providers as critical (CTPPs) for the first time, from hyperscalers and network and data centre operators to specialised providers of financial data and services. Since 2026, these providers have been under direct ESA oversight with Lead Overseers and Joint Examination Teams.<\/p>\r\n          <p><b>Important for financial entities:<\/b> operational responsibility stays with you. If you use a CTPP, that dependency needs to be reflected in your own register and your concentration risk assessment, and the insights from ESA oversight need to flow into your own ICT risk management. If a critical provider fails to act on supervisory recommendations, national authorities can, as a last resort, require financial entities to suspend or terminate use of its services.<\/p>\r\n        <\/div>\r\n      <\/details>\r\n\r\n      <details>\r\n        <summary>What is the register of information and what applies from 2026?<span class=\"sgd-chev\"><svg viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2.6\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M6 9l6 6 6-6\"\/><\/svg><\/span><\/summary>\r\n        <div class=\"sgd-a\">\r\n          <p>The register of information documents all contractual arrangements with ICT third-party providers, specifically flagging services that support critical or important functions. It is transmitted to the ESAs every year via the national supervisor.<\/p>\r\n          <p>From the first submission round, supervisors flagged typical weaknesses: incomplete registers (think shadow IT), missing exit plans, and contracts still lagging behind the minimum content of the technical standards. For the ongoing rounds, data quality is the deciding factor. A tool-supported register linked to contracts, risks and functions cuts errors and effort considerably.<\/p>\r\n        <\/div>\r\n      <\/details>\r\n\r\n      <details>\r\n        <summary>What are the reporting deadlines for major ICT incidents?<span class=\"sgd-chev\"><svg viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2.6\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M6 9l6 6 6-6\"\/><\/svg><\/span><\/summary>\r\n        <div class=\"sgd-a\">\r\n          <p>Once an incident is classified as major, the initial notification is due within four hours, and no later than 24 hours after detection. It is followed by an intermediate report no later than 72 hours after the initial notification and a final report, including root cause analysis, no later than one month after the last intermediate report. The deadlines are tight, which is why a rehearsed, tool-supported reporting process with clear roles is decisive. Practice confirms it: since DORA took effect, several hundred major ICT incidents have been reported in Germany alone, a large share of them linked to external providers.<\/p>\r\n        <\/div>\r\n      <\/details>\r\n\r\n      <details>\r\n        <summary>Does DORA also affect Swiss companies?<span class=\"sgd-chev\"><svg viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2.6\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M6 9l6 6 6-6\"\/><\/svg><\/span><\/summary>\r\n        <div class=\"sgd-a\">\r\n          <p>DORA is an EU regulation, but its effects reach beyond the EU. Swiss financial companies with subsidiaries or business activity in the EU are affected, and so are Swiss ICT providers serving EU financial entities: their clients demand DORA-compliant contracts, the ability to provide evidence, and cooperation on the register of information. Swiss supervisory practice is also increasingly aligning with comparable operational resilience principles. Whoever implements the DORA logic today is well positioned in both markets.<\/p>\r\n        <\/div>\r\n      <\/details>\r\n\r\n      <details>\r\n        <summary>How do DORA and NIS2 differ?<span class=\"sgd-chev\"><svg viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2.6\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M6 9l6 6 6-6\"\/><\/svg><\/span><\/summary>\r\n        <div class=\"sgd-a\">\r\n          <p>NIS2 is a directive with a broad, cross-sector scope covering essential and important entities. DORA is a regulation that applies specifically and directly to the financial sector. For financial entities, DORA takes precedence over NIS2 as the sector-specific regime. Many organisations still need to keep both frameworks in view, for example in groups with financial and non-financial companies. The SwissGRC&#174;&nbsp;Platform maps both frameworks in one platform, so evidence only has to be produced once.<\/p>\r\n        <\/div>\r\n      <\/details>\r\n\r\n      <details>\r\n        <summary>How does Swiss&nbsp;GRC support DORA compliance?<span class=\"sgd-chev\"><svg viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2.6\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M6 9l6 6 6-6\"\/><\/svg><\/span><\/summary>\r\n        <div class=\"sgd-a\">\r\n          <p>The SwissGRC&#174;&nbsp;Platform covers the DORA requirements as one coherent whole: a DORA compliance check with measure tracking, ICT risk management and ISMS, the register of information under DORA, end-to-end incident management with a reporting process, business continuity management, and third-party risk management including exit strategies and CTPP dependencies.<\/p>\r\n          <p>As a scalable solution it grows with you: start with the DORA core topics and extend your GRC processes step by step to further areas. Optionally with data residency in Switzerland, and supported by our team, which knows the regulated DACH market from years of hands-on work.<\/p>\r\n        <\/div>\r\n      <\/details>\r\n    <\/div>\r\n  <\/div>\r\n\r\n<script type=\"application\/ld+json\">\r\n{\"@context\":\"https:\/\/schema.org\",\"@type\":\"FAQPage\",\"mainEntity\":[\r\n{\"@type\":\"Question\",\"name\":\"What is the Digital Operational Resilience Act (DORA)?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"DORA is Regulation (EU) 2022\/2554. It entered into force on 16 January 2023 and has applied since 17 January 2025. It harmonises digital operational resilience requirements for around 20 types of financial entities in the EU and brings ICT third-party providers directly into scope.\"}},\r\n{\"@type\":\"Question\",\"name\":\"What are the five pillars of DORA?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"ICT risk management, incident management and reporting, digital resilience testing including TLPT for significant institutions, ICT third-party risk management including the register of information, and voluntary information sharing on cyber threats.\"}},\r\n{\"@type\":\"Question\",\"name\":\"What changed with the CTPP list of November 2025?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"On 18 November 2025, EBA, ESMA and EIOPA designated 19 ICT third-party providers as critical (CTPPs). Since 2026 they have been under direct ESA oversight with Lead Overseers and Joint Examination Teams. Operational responsibility for third-party risk remains with the financial entity.\"}},\r\n{\"@type\":\"Question\",\"name\":\"What is the register of information and what applies from 2026?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"The register of information documents all contractual arrangements with ICT third-party providers and is transmitted to the ESAs every year via the national supervisor. Data quality is the deciding factor in the ongoing submission rounds.\"}},\r\n{\"@type\":\"Question\",\"name\":\"What are the reporting deadlines for major ICT incidents?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"The initial notification is due within four hours of classifying an incident as major, and no later than 24 hours after detection. An intermediate report follows no later than 72 hours after the initial notification and a final report no later than one month after the last intermediate report.\"}},\r\n{\"@type\":\"Question\",\"name\":\"Does DORA also affect Swiss companies?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"Yes. Swiss financial companies with subsidiaries or business activity in the EU are affected, and so are Swiss ICT providers serving EU financial entities, whose clients demand DORA-compliant contracts and cooperation on the register of information.\"}},\r\n{\"@type\":\"Question\",\"name\":\"How do DORA and NIS2 differ?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"NIS2 is a cross-sector directive for essential and important entities. DORA is a regulation that applies specifically and directly to the financial sector and takes precedence over NIS2 for financial entities as the sector-specific regime.\"}},\r\n{\"@type\":\"Question\",\"name\":\"How does Swiss GRC support DORA compliance?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"The SwissGRC\u00ae Platform covers the DORA requirements in one coherent whole: DORA compliance check, ICT risk management and ISMS, register of information, end-to-end incident management with a reporting process, business continuity management, and third-party risk management including exit strategies.\"}}\r\n]}\r\n<\/script>\r\n<\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-a1709fb e-con-full e-flex e-con e-parent\" data-id=\"a1709fb\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-6e1cb3c elementor-widget elementor-widget-html\" data-id=\"6e1cb3c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"html.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div id=\"sgdora-cta\">\r\n<style>\r\n.elementor-widget-html:has(#sgdora-cta){margin-block:0 !important;}\r\n.elementor-widget-container:has(> #sgdora-cta){margin:0 !important;padding:0 !important;background:transparent !important;}\r\n.elementor-element:has(> .elementor-widget-container > #sgdora-cta){margin-block:0 !important;padding-block:0 !important;}\r\n.elementor-column:has(#sgdora-cta) > .elementor-widget-wrap,\r\n.elementor-widget-wrap:has(#sgdora-cta){padding:0 !important;}\r\n.e-con:has(#sgdora-cta),.e-con-inner:has(#sgdora-cta){margin-block:0 !important;padding-block:0 !important;--gap:0px !important;row-gap:0 !important;}\r\n\r\n#sgdora-cta{\r\n  --sgd-navy:#1A2E4C; --sgd-navy-deep:#122238; --sgd-teal:#17a2ac; --sgd-teal-bright:#2dc6cb;\r\n  --sgd-mint:#00bfad; --sgd-magenta:#B82850;\r\n  --sgd-font-head:'Anek Latin','Inter',system-ui,sans-serif;\r\n  --sgd-font-body:'Inter',system-ui,sans-serif;\r\n  font-family:var(--sgd-font-body); box-sizing:border-box; color:#fff; position:relative; overflow:hidden;\r\n  background:\r\n    radial-gradient(900px 520px at 85% 0%, rgba(45,198,203,.16), transparent 60%),\r\n    radial-gradient(700px 460px at 5% 100%, rgba(184,40,80,.14), transparent 60%),\r\n    linear-gradient(160deg, var(--sgd-navy) 0%, var(--sgd-navy-deep) 100%);\r\n  padding:96px 24px;\r\n}\r\n#sgdora-cta *,#sgdora-cta *::before,#sgdora-cta *::after{box-sizing:inherit;}\r\n#sgdora-cta .sgd-grid-bg{position:absolute; inset:0; pointer-events:none; opacity:.4;\r\n  background-image:linear-gradient(rgba(255,255,255,.04) 1px, transparent 1px),\r\n    linear-gradient(90deg, rgba(255,255,255,.04) 1px, transparent 1px);\r\n  background-size:56px 56px;\r\n  mask-image:radial-gradient(closest-side at 50% 50%, #000 30%, transparent 100%);\r\n  -webkit-mask-image:radial-gradient(closest-side at 50% 50%, #000 30%, transparent 100%);}\r\n#sgdora-cta .sgd-wrap{position:relative; max-width:860px; margin:0 auto; text-align:center;}\r\n#sgdora-cta .sgd-eyebrow{display:inline-flex; align-items:center; gap:10px; font:600 13px\/1 var(--sgd-font-body);\r\n  letter-spacing:.14em; text-transform:uppercase; color:var(--sgd-teal-bright); margin:0 0 18px;}\r\n#sgdora-cta h2{font-family:var(--sgd-font-head); font-weight:700; font-size:clamp(30px,3.8vw,46px);\r\n  line-height:1.1; letter-spacing:-.01em; color:#fff; margin:0 0 18px;}\r\n#sgdora-cta h2 em{font-style:normal; color:var(--sgd-teal-bright);}\r\n#sgdora-cta .sgd-sub{font-size:17px; line-height:1.7; color:rgba(255,255,255,.8); max-width:56ch; margin:0 auto 34px;}\r\n#sgdora-cta .sgd-cta-row{display:flex; flex-wrap:wrap; gap:14px; justify-content:center; margin-bottom:36px;}\r\n#sgdora-cta .sgd-btn{display:inline-flex; align-items:center; gap:9px; text-decoration:none;\r\n  font:600 15.5px\/1 var(--sgd-font-body); border-radius:10px; padding:16px 30px;\r\n  transition:transform .18s ease, box-shadow .18s ease, background .18s ease;}\r\n#sgdora-cta .sgd-btn-primary{background:linear-gradient(135deg,var(--sgd-teal,#17a2ac) 0%,var(--sgd-mint) 100%); color:#fff; box-shadow:0 8px 24px rgba(23,162,172,.38);}\r\n#sgdora-cta .sgd-btn-primary:hover{transform:translateY(-2px); box-shadow:0 12px 30px rgba(23,162,172,.5); color:#fff;}\r\n#sgdora-cta .sgd-btn-ghost{background:rgba(255,255,255,.07); color:#fff; border:1px solid rgba(255,255,255,.25);}\r\n#sgdora-cta .sgd-btn-ghost:hover{background:rgba(255,255,255,.13); transform:translateY(-2px); color:#fff;}\r\n#sgdora-cta .sgd-btn svg{width:16px; height:16px;}\r\n\r\n@media (prefers-reduced-motion:reduce){ #sgdora-cta .sgd-btn{transition:none;} }\r\n@media (max-width:560px){\r\n  #sgdora-cta{padding:64px 18px;}\r\n  #sgdora-cta .sgd-btn{width:100%; justify-content:center;}\r\n}\r\n<\/style>\r\n\r\n  <div class=\"sgd-grid-bg\" aria-hidden=\"true\"><\/div>\r\n  <div class=\"sgd-wrap\">\r\n    <p class=\"sgd-eyebrow\">SwissGRC&#174;&nbsp;Platform<\/p>\r\n    <h2>Supervisors ask. <em>You deliver.<\/em><\/h2>\r\n    <p class=\"sgd-sub\">See how you manage your register of information, incident reporting and third-party risk with the SwissGRC&#174;&nbsp;Platform.<\/p>\r\n    <div class=\"sgd-cta-row\">\r\n      <a class=\"sgd-btn sgd-btn-primary\" href=\"\/en\/demo\/\">\r\n        Request a demo\r\n      <\/a>\r\n      <a class=\"sgd-btn sgd-btn-ghost\" href=\"https:\/\/swissgrc.com\/en\/sales\/\">Contact sales<\/a>\r\n    <\/div>\r\n  <\/div>\r\n<\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>DORA compliance DORA has become part of your daily work. We make it lighter. Maintaining the register of information, reporting incidents on time, keeping third parties in view: you know exactly what needs to be done. What is often missing is a system that holds it all together. The SwissGRC&#174;&nbsp;Platform brings your DORA topics together [&hellip;]<\/p>\n","protected":false},"author":5,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"inline_featured_image":false,"_eb_attr":"","footnotes":"","_links_to":"","_links_to_target":""},"class_list":["post-45662","page","type-page","status-publish","hentry"],"acf":[],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO Pro 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"DORA Compliance with the SwissGRC\u00ae Platform: Strengthen digital resilience and efficiently meet DORA requirements in the financial sector.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"google-site-verification\" content=\"google-site-verification=BAztS2wKP0jEfbvHt4_mrvvD17WwzZg1w1A6R9uoQRU\" \/>\n\t<link rel=\"canonical\" href=\"https:\/\/swissgrc.com\/en\/digital-operational-resilience-act-dora\/\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO Pro (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"en_GB\" \/>\n\t\t<meta property=\"og:site_name\" content=\"Swiss GRC | Governance, Risk &amp; Compliance (GRC)\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"DORA Compliance for Digital Resilience | SwissGRC\u00ae\" \/>\n\t\t<meta property=\"og:description\" content=\"DORA Compliance with the SwissGRC\u00ae Platform: Strengthen digital resilience and efficiently meet DORA requirements in the financial sector.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/swissgrc.com\/en\/digital-operational-resilience-act-dora\/\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/swissgrc.com\/en\/wp-content\/uploads\/sites\/2\/2024\/06\/DORA-2-scaled.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/swissgrc.com\/en\/wp-content\/uploads\/sites\/2\/2024\/06\/DORA-2-scaled.jpg\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2024-06-14T08:34:26+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-10-07T09:46:35+00:00\" \/>\n\t\t<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n\t\t<meta name=\"twitter:site\" content=\"@SwissGRC\" \/>\n\t\t<meta name=\"twitter:title\" content=\"DORA Compliance for Digital Resilience | SwissGRC\u00ae\" \/>\n\t\t<meta name=\"twitter:description\" content=\"DORA Compliance with the SwissGRC\u00ae Platform: Strengthen digital resilience and efficiently meet DORA requirements in the financial sector.\" \/>\n\t\t<meta name=\"twitter:creator\" content=\"@SwissGRC\" \/>\n\t\t<meta name=\"twitter:image\" content=\"https:\/\/swissgrc.com\/en\/wp-content\/uploads\/sites\/2\/2024\/06\/DORA-2-scaled.jpg\" \/>\n\t\t<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t\t<meta name=\"twitter:data1\" content=\"superadmin\" \/>\n\t\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t\t<meta name=\"twitter:data2\" content=\"13 minutes\" \/>\n\t\t<script type=\"application\/ld+json\" class=\"aioseo-schema\">\n\t\t\t{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/digital-operational-resilience-act-dora\\\/#breadcrumblist\",\"itemListElement\":[{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/#listItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/digital-operational-resilience-act-dora\\\/#listItem\",\"name\":\"Digital Operational Resilience Act (DORA)\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/digital-operational-resilience-act-dora\\\/#listItem\",\"position\":2,\"name\":\"Digital Operational Resilience Act (DORA)\",\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/#listItem\",\"name\":\"Home\"}}]},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/#organization\",\"name\":\"Swiss GRC AG\",\"description\":\"Swiss GRC delivers Software Solutions for GRC, CLM &amp; BPM, helping businesses worldwide manage risks, ensure compliance, and drive success.\",\"url\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/\",\"telephone\":\"+41412207500\",\"logo\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/wp-content\\\/uploads\\\/sites\\\/2\\\/2023\\\/06\\\/Logo_V1_Original_mit_Claim.png\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/digital-operational-resilience-act-dora\\\/#organizationLogo\"},\"image\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/digital-operational-resilience-act-dora\\\/#organizationLogo\"},\"sameAs\":[\"https:\\\/\\\/www.twitter.com\\\/SwissGRC\",\"https:\\\/\\\/www.instagram.com\\\/swissgrc\\\/\",\"https:\\\/\\\/www.youtube.com\\\/channel\\\/UCy4QuXYekCQrA4n5oEwJSJg\",\"https:\\\/\\\/ch.linkedin.com\\\/company\\\/swissgrc\"]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/digital-operational-resilience-act-dora\\\/#webpage\",\"url\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/digital-operational-resilience-act-dora\\\/\",\"name\":\"DORA Compliance for Digital Resilience | SwissGRC\\u00ae\",\"description\":\"DORA Compliance with the SwissGRC\\u00ae Platform: Strengthen digital resilience and efficiently meet DORA requirements in the financial sector.\",\"inLanguage\":\"en-GB\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/#website\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/digital-operational-resilience-act-dora\\\/#breadcrumblist\"},\"datePublished\":\"2024-06-14T10:34:26+02:00\",\"dateModified\":\"2026-10-07T11:46:35+02:00\"},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/\",\"name\":\"Swiss GRC - Software Solutions for GRC, CLM &amp; BPM\",\"description\":\"Governance, Risk & Compliance (GRC)\",\"inLanguage\":\"en-GB\",\"publisher\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/#organization\"}}]}\n\t\t<\/script>\n\t\t<!-- All in One SEO Pro -->\r\n\t\t<title>DORA Compliance for Digital Resilience | SwissGRC\u00ae<\/title>\n\n","aioseo_head_json":{"title":"DORA Compliance for Digital Resilience | SwissGRC\u00ae","description":"DORA Compliance with the SwissGRC\u00ae Platform: Strengthen digital resilience and efficiently meet DORA requirements in the financial sector.","canonical_url":"https:\/\/swissgrc.com\/en\/digital-operational-resilience-act-dora\/","robots":"max-image-preview:large","keywords":"","webmasterTools":{"google-site-verification":"google-site-verification=BAztS2wKP0jEfbvHt4_mrvvD17WwzZg1w1A6R9uoQRU","miscellaneous":""},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"BreadcrumbList","@id":"https:\/\/swissgrc.com\/en\/digital-operational-resilience-act-dora\/#breadcrumblist","itemListElement":[{"@type":"ListItem","@id":"https:\/\/swissgrc.com\/en\/#listItem","position":1,"name":"Home","item":"https:\/\/swissgrc.com\/en\/","nextItem":{"@type":"ListItem","@id":"https:\/\/swissgrc.com\/en\/digital-operational-resilience-act-dora\/#listItem","name":"Digital Operational Resilience Act (DORA)"}},{"@type":"ListItem","@id":"https:\/\/swissgrc.com\/en\/digital-operational-resilience-act-dora\/#listItem","position":2,"name":"Digital Operational Resilience Act (DORA)","previousItem":{"@type":"ListItem","@id":"https:\/\/swissgrc.com\/en\/#listItem","name":"Home"}}]},{"@type":"Organization","@id":"https:\/\/swissgrc.com\/en\/#organization","name":"Swiss GRC AG","description":"Swiss GRC delivers Software Solutions for GRC, CLM &amp; BPM, helping businesses worldwide manage risks, ensure compliance, and drive success.","url":"https:\/\/swissgrc.com\/en\/","telephone":"+41412207500","logo":{"@type":"ImageObject","url":"https:\/\/swissgrc.com\/en\/wp-content\/uploads\/sites\/2\/2023\/06\/Logo_V1_Original_mit_Claim.png","@id":"https:\/\/swissgrc.com\/en\/digital-operational-resilience-act-dora\/#organizationLogo"},"image":{"@id":"https:\/\/swissgrc.com\/en\/digital-operational-resilience-act-dora\/#organizationLogo"},"sameAs":["https:\/\/www.twitter.com\/SwissGRC","https:\/\/www.instagram.com\/swissgrc\/","https:\/\/www.youtube.com\/channel\/UCy4QuXYekCQrA4n5oEwJSJg","https:\/\/ch.linkedin.com\/company\/swissgrc"]},{"@type":"WebPage","@id":"https:\/\/swissgrc.com\/en\/digital-operational-resilience-act-dora\/#webpage","url":"https:\/\/swissgrc.com\/en\/digital-operational-resilience-act-dora\/","name":"DORA Compliance for Digital Resilience | SwissGRC\u00ae","description":"DORA Compliance with the SwissGRC\u00ae Platform: Strengthen digital resilience and efficiently meet DORA requirements in the financial sector.","inLanguage":"en-GB","isPartOf":{"@id":"https:\/\/swissgrc.com\/en\/#website"},"breadcrumb":{"@id":"https:\/\/swissgrc.com\/en\/digital-operational-resilience-act-dora\/#breadcrumblist"},"datePublished":"2024-06-14T10:34:26+02:00","dateModified":"2026-10-07T11:46:35+02:00"},{"@type":"WebSite","@id":"https:\/\/swissgrc.com\/en\/#website","url":"https:\/\/swissgrc.com\/en\/","name":"Swiss GRC - Software Solutions for GRC, CLM &amp; BPM","description":"Governance, Risk & Compliance (GRC)","inLanguage":"en-GB","publisher":{"@id":"https:\/\/swissgrc.com\/en\/#organization"}}]},"og:locale":"en_GB","og:site_name":"Swiss GRC | Governance, Risk &amp; Compliance (GRC)","og:type":"article","og:title":"DORA Compliance for Digital Resilience | SwissGRC\u00ae","og:description":"DORA Compliance with the SwissGRC\u00ae Platform: Strengthen digital resilience and efficiently meet DORA requirements in the financial sector.","og:url":"https:\/\/swissgrc.com\/en\/digital-operational-resilience-act-dora\/","og:image":"https:\/\/swissgrc.com\/en\/wp-content\/uploads\/sites\/2\/2024\/06\/DORA-2-scaled.jpg","og:image:secure_url":"https:\/\/swissgrc.com\/en\/wp-content\/uploads\/sites\/2\/2024\/06\/DORA-2-scaled.jpg","article:published_time":"2024-06-14T08:34:26+00:00","article:modified_time":"2026-10-07T09:46:35+00:00","twitter:card":"summary_large_image","twitter:site":"@SwissGRC","twitter:title":"DORA Compliance for Digital Resilience | SwissGRC\u00ae","twitter:description":"DORA Compliance with the SwissGRC\u00ae Platform: Strengthen digital resilience and efficiently meet DORA requirements in the financial sector.","twitter:creator":"@SwissGRC","twitter:image":"https:\/\/swissgrc.com\/en\/wp-content\/uploads\/sites\/2\/2024\/06\/DORA-2-scaled.jpg","twitter:label1":"Written by","twitter:data1":"superadmin","twitter:label2":"Est. reading time","twitter:data2":"13 minutes"},"aioseo_meta_data":{"post_id":"45662","title":"DORA Compliance for Digital Resilience | SwissGRC\u00ae","description":"DORA Compliance with the SwissGRC\u00ae Platform: Strengthen digital resilience and efficiently meet DORA requirements in the financial sector.","keywords":null,"keyphrases":{"focus":{"keyphrase":"DORA","score":0,"analysis":[]},"additional":[{"keyphrase":"DORA Compliance","score":80},{"keyphrase":"Digital Operational Resilience Act","score":0}]},"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"custom_image","og_image_url":"https:\/\/swissgrc.com\/en\/wp-content\/uploads\/sites\/2\/2024\/06\/DORA-2-scaled.jpg","og_image_width":"0","og_image_height":"0","og_image_custom_url":"https:\/\/swissgrc.com\/en\/wp-content\/uploads\/sites\/2\/2024\/06\/DORA-2-scaled.jpg","og_image_custom_fields":null,"og_video":"","og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":true,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"WebPage","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":"-1","robots_max_videopreview":"-1","robots_max_imagepreview":"large","priority":null,"frequency":"default","local_seo":null,"seo_analyzer_scan_date":"2026-10-07 09:48:02","breadcrumb_settings":null,"limit_modified_date":false,"open_ai":"{\"title\":{\"suggestions\":[],\"usage\":0},\"description\":{\"suggestions\":[],\"usage\":0}}","ai":{"faqs":[],"keyPoints":[],"schemas":[],"titles":[],"descriptions":[],"socialPosts":{"email":{"subject":"","preview":"","content":""},"linkedin":[],"twitter":[],"facebook":[],"instagram":[]}},"created":"2024-06-14 08:22:42","updated":"2026-10-07 10:23:27","focus_keyword":"DORA","additional_keywords":[{"word":"DORA Compliance","score":80,"items":{"introductionKeyword":{"score":9},"keyphraseLength":{"score":9},"keyphraseDensity":{"score":4},"functionWordsInKeyphrase":{"score":9},"textCompetingLinks":{"score":9},"imageKeyphrase":{"score":3}}},{"word":"Digital Operational Resilience Act","score":69,"items":{"introductionKeyword":{"score":3},"keyphraseLength":{"score":9},"keyphraseDensity":{"score":4},"functionWordsInKeyphrase":{"score":9},"textCompetingLinks":{"score":9},"imageKeyphrase":{"score":3}}}],"truseo_locale":null},"aioseo_breadcrumb":"<div class=\"aioseo-breadcrumbs\"><span class=\"aioseo-breadcrumb\">\n\t<a href=\"https:\/\/swissgrc.com\/en\/\" title=\"Home\">Home<\/a>\n<\/span><span class=\"aioseo-breadcrumb-separator\">\u00bb<\/span><span class=\"aioseo-breadcrumb\">\n\tDigital Operational Resilience Act (DORA)\n<\/span><\/div>","aioseo_breadcrumb_json":[{"label":"Home","link":"https:\/\/swissgrc.com\/en\/"},{"label":"Digital Operational Resilience Act (DORA)","link":"https:\/\/swissgrc.com\/en\/digital-operational-resilience-act-dora\/"}],"_links":{"self":[{"href":"https:\/\/swissgrc.com\/en\/wp-json\/wp\/v2\/pages\/45662","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/swissgrc.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/swissgrc.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/swissgrc.com\/en\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/swissgrc.com\/en\/wp-json\/wp\/v2\/comments?post=45662"}],"version-history":[{"count":28,"href":"https:\/\/swissgrc.com\/en\/wp-json\/wp\/v2\/pages\/45662\/revisions"}],"predecessor-version":[{"id":69169,"href":"https:\/\/swissgrc.com\/en\/wp-json\/wp\/v2\/pages\/45662\/revisions\/69169"}],"wp:attachment":[{"href":"https:\/\/swissgrc.com\/en\/wp-json\/wp\/v2\/media?parent=45662"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}