Delfen

Free · for EU financial entities

The DORA Readiness Check

10 questions that reveal whether your DORA program rests on architecture — or a checklist. Built for CISOs, CIOs and IT-risk leads. 10 minutes, an honest score, and the ISO 27001 shortcut most teams miss.

Free. You'll also get the weekly briefing — unsubscribe anytime.

What’s inside

10 questions, architect-grade

Not a control checklist — the questions that test whether you can map each Critical or Important Function to its ICT assets and dependencies (DORA Article 8), and where your third-party concentration risk sits (Article 29).

The ISO 27001 → DORA map

Which of DORA’s five pillars your existing ISMS already covers — in Delfen’s assessment, most of it — and the four deltas you still have to close, so you reuse, not rebuild.

A score you can act on

Three bands that tell you whether you have a resilience program or a binder — and where to start if it’s the latter.

The Readiness Check is the front door to the DORA Resilience Blueprint — the full, ArchiMate-exportable tool, arriving Q4 2026.