DORA RTS — sample audit checklist
The first section rendered in full, plus the table of contents for the rest, watermarked SAMPLE. See exactly how the questions, evidence prompts and source text read before you buy. Free, no email required.
DORA's regulatory technical standards are where the real detail lives — and where an examiner gets specific. The high-level regulation is the easy part; the RTS is what trips organisations up.
Why now
The RTS are in force alongside DORA (applicable since January 2025). Satisfying the regulation at headline level but missing the RTS detail is a common — and examinable — gap.
What you get for €600
01
Every provision mapped
All 480 audit questions trace to a specific article, annex or clause of DORA RTS. Nothing is hand-waved: each provision is either covered by one or more questions or explicitly recorded as informational. The free Compliance Matrix proves it, line by line.
02
Built to survive scrutiny
Authored and reviewed by compliance management professionals with decades of regulatory experience, against a stated version of DORA RTS. Source text is reproduced verbatim per question, with suggested evidence inline — so an auditor (or a regulator) can follow every answer back to the regulation.
03
Hundreds of hours, ready Monday
The decomposition, evidence prompts and classification scheme are done. Five ready-to-use formats, delivered on payment, that drop straight into your audit process or your GRC tool — instead of months building a checklist from the raw regulation.
COMPLIANCE MATRIX — FREE, UNGATED
Every provision of DORA RTS, accounted for.
Before you spend a cent, download the Compliance Matrix. Every leaf of the regulation appears as a row, with its coverage status and the audit questions that map to it. It is the proof that this checklist is complete — and the artefact your own auditor can use to check the checker.
480
Audit questions
100%
Provisions accounted for
5
Artefact formats
12
Months of updates
Authored and reviewed by compliance management professionals. Reviewed against v2024; each Compliance Matrix states the exact version it was verified against.
See a sample first
Pricing
One regulation, one organisation, 12 months of updates included. A single invoice — not a subscription, nothing auto-debited.
Every amendment to DORA RTS within your 12-month window is re-rendered against the new version and emailed to you automatically. When the 12 months end you keep every artefact you've downloaded — you simply stop receiving new amendments unless you renew.
| Licence | Price | What it covers |
|---|---|---|
| Single organisation | €600 | Use across your organisation, 12 months of updates, all five artefact formats plus the Compliance Matrix. |
Licensing for a group of separate legal entities? Contact us for group licensing.
What you'll receive
Five formats of the same reviewed content, covering the full DORA RTS, delivered by email the moment payment clears. Every amendment during your 12-month window is re-rendered and emailed automatically. Everything you download is yours to keep.
- 01 Audit Checklist The auditor's working document. Per-question blocks with a compliance state, four-state classification and finding-level boxes, the regulation source text verbatim plus suggested evidence inline, and a management-system reference field. Print-ready. PDF
- 02 Audit Checklist The same content as plain text. Diff it against last year's edition, drop it into Confluence / Notion / your internal wiki via pandoc, or feed it to internal review tooling. MD
- 03 Audit Workbook Multi-sheet workbook mirroring the PDF: cover, per-section sheets with dropdowns and conditional formatting, Findings Log, Cross-Reference Register and Dashboard. XLSX
- 04 Data Bank A flat one-row-per-question table. The universal format for upload into third-party audit and GRC software, or your own in-house tooling. Opens directly in Excel. CSV
- 05 Question Bank A lean structured schema: citation, regulatory hook, question text, classification options, severity, applicability. A stable XSD contract for structured ingestion into third-party audit and GRC software. XML