LexLint.ioBeta

Know the law your code answers to.

Law / Italy

Decreto legislativo 10 marzo 2025, n. 23, DORA Competent Authorities and Regulatory Powers

Artt. 3 e 9, Decreto legislativo 10 marzo 2025, n. 23

In force since .

A sector security regimes rule binding public and private bodies.

Private right of action
No
Obligation class
Security, Governance

As of .

What it requires

  • If you are a financial entity supervised by Banca d'Italia, Consob, IVASS or COVIP, comply with the DORA Regulation and with the provisions those authorities issue to implement it and the decree (Legislative Decree 23/2025, Articles 3 and 9).
  • If you are a financial intermediary or Bancoposta, comply with the obligations the decree places on you, which Banca d'Italia supervises (Article 3(3)).

These lines are LexLint's reading of the law's text, as of .

In the frameworks

NIST CSF 2.0
  • GV.OC-03Legal, regulatory, and contractual requirements regarding cybersecurity - including privacy and civil liberties obligations - are understood and managed
CIS Controls
  • 3.2A maintained catalogue of the sensitive data the enterprise holds and where it sits.
  • 8.2Turning on and gathering logs from the enterprise's systems.
FINOS AIGF
ENISA NIS2 guidance
  • 1.1Policy on the security of network and information systems
  • 1.2Roles, responsibilities and authorities
  • 2.2Compliance monitoring
  • 3.2Monitoring and logging
  • 12.4Asset inventory

Our reading of where this law's duties sit in each framework. It never says that running a control meets the law. How we read a framework against the law

CIS Critical Security Controls® (CIS Controls®) v8.1 © Center for Internet Security, Inc. Safeguard numbers are used under a CIS Controls Supporter License; the one-line descriptions beside them are our own, not CIS text.

Who enforces it

Enforcement body

Banca d'Italia, Consob, IVASS and COVIP, the competent authorities under Article 3 of the decree for the entities each supervises, with Banca d'Italia competent for Cassa depositi e prestiti, financial intermediaries and Bancoposta.

Settledness

As of

What this law does

Drafted with AI

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page. How this site is made

Research summary

Legal information, not legal advice. This is LexLint's own research summary of a public legal source, and it creates no attorney-client relationship. For decisions that matter, consult qualified counsel in the relevant jurisdiction. About LexLint

Banca d'Italia, Consob, IVASS and COVIP are the competent authorities under Article 46 of the DORA Regulation (Regulation (EU) 2022/2554) for compliance with it by the entities each of them supervises (Article 3(1)). Banca d'Italia is also the competent authority for DORA compliance by Cassa depositi e prestiti and for compliance with the decree by financial intermediaries and Bancoposta (Article 3(2) and (3)).

The DORA competent authorities may issue provisions implementing the decree and the DORA Regulation (Article 9). The decree entered into force on , after publication in Gazzetta Ufficiale 58 of .

When LexLint raises it

When your app profile says your app provides financial services.

Back to the example  ·  Lint your app