← Mandate Registry · 7 mandate layers · dora

financial · DORA Article 17 · DORA Article 19 · DORA Article 28

DORA / Financial Operational Resilience

ICT third-party AI provider = critical function — register + audit or supervisory fine

—DORA in force — ICT risk management

Regulatory exposure — commonly overlooked:
Bank uses cloud AI — bank owns DORA compliance, cloud vendor owns shared responsibility matrix gap. · Korea AI Basic Act emerging — early movers on receipt infrastructure win Samsung/LG supply chain.

TAM / Exposure

EU financial entities · DORA applies now

Insurance lines

Cyber · D&O · Professional indemnity

Exhibit authority

Korea AI Basic Act Pack — DORA Art 17/28 ICT Incident Pack

Global leaders

EBA · Deutsche Bank · BNP Paribas · Critical ICT providers · KISA · Samsung · Naver · Kakao

Art 28 register

Critical ICT providers must be registered — AI vendors increasingly on list.

Incident reporting

4-hour initial notification — AI-caused incident needs decision receipt.

TLPT

Threat-led penetration testing includes AI attack paths.

[South Korea] Chip + AI

Samsung, SK Hynix AI in manufacturing — safety-critical receipt requirements.

[South Korea] K-pop platform AI

Content moderation AI for global platforms headquartered in KR.

[Text / Chat] Modality hook

Baseline — all frameworks apply to text decisions.

7 mandate layers (live)

Regulatory Clock Countdown to operative regulatory deadline — NAIC adoption, GSE mandate, EU transposition. Open →

Domain Classifier Industry-specific SAFE/CRISIS/VIOLATION with regulatory framework mapping. Open →

Exhibit / Filing Pack Regulator-ready external validation — NAIC Exhibit D, Fannie QC, EU FRIA, FDA Part 11. Open →

Mandate Registry Enroll deployers/insureds under vertical-specific governance mandate. Open →

Bind / Action Gate ALLOW/BLOCK before consequential action — bind policy, sell loan, deactivate worker. Open →

Compliance Certificate Deployer-facing downloadable cert — forward to counsel, auditor, regulator. Open →

Actuarial / Risk Feed Anonymized asymmetry signals for pricing, reserving, reinsurance correlation. Open →

Run dora demo Regulatory calendar Download exhibit pack Verify independently