Five documents from our DORA toolkit, free. These are the core documents everything else is built on: one complete and two as previews of the opening pages, plus working records from the same set.

What is in the free set

DocumentWhat it is for
DORA ICT Business Continuity PolicyThe ICT business continuity commitments under DORA: what keeps running through disruption, on what timescales, and how it is tested (Article 11).
DORA Article 30 Contractual Provisions ChecklistThe working tool for verifying, contract by contract, that every provision DORA requires in an ICT services arrangement is present.
DORA ICT Risk Management Framework (preview: first 5 of 10 pages)The anchor document for the ICT risk pillar required by DORA Article 6: governance, processes and controls.
DORA Register of Information Procedure (preview: first 5 of 10 pages)Who populates the Register of Information, data sources, validation, update triggers and annual submission (Article 28).
DORA Initial Notification Report TemplateCaptures what the entity submits to its competent authority at the initial notification stage after a major ICT-related incident.

Get the files


We send one confirmation email first — double opt-in, no exceptions. Download links stay live for 14 days. See our privacy policy.

Want the rest?

These five come from the full DORA Documentation Toolkit. The complete contents list and sample pages are on the product page.

Free templates for other frameworks