FREE TEMPLATE · EXCEL WORKBOOK
DORA gap assessment workbook
A gap assessment that maps DORA’s ICT risk management, incident, testing, third-party and information-sharing requirements, plus the key RTS articles, to current state, maturity, owner and evidence. Entity scoping and reporting timeline sheets help groups with several licences in the Benelux.
What's inside
- 50 requirements across governance, ICT risk framework, protection, detection, continuity, incidents, testing, third-party risk and information sharing
- References to DORA articles and Delegated Regulations 2024/1774, 2024/1772 and 2025/301
- Entity scoping sheet with competent authority, Article 16 eligibility and reporting channel
- Incident reporting timeline with owners and deputies
- Maturity, priority and target date columns for an action plan
Worksheets
Gap assessmentEntity scopeIncident timeline
How to use it
- Complete the Entity scope sheet for every licensed entity in the group.
- Assess each requirement and record the current state and maturity.
- Describe the gap and assign an owner, priority and target date.
- Link evidence for items marked as in place.
- Report the summary to the management body and repeat the review yearly.
Companion guide
Same house style as every Secrato template: a start sheet with instructions, light blue cells to fill in, and version control. Free to use within your organisation. This template is practical guidance, not legal advice.
Get the template
Enter your work e-mail and we will send you a personal download link straight away. We may follow up with related guidance; you can opt out at any time.
