Published by ODA3 InstituteGAISSF™ to DORA Crosswalk
ID GAISSF-CRO-028
Framework GAISSF™ Type Crosswalk
Read this first. A crosswalk records a documented correspondence under stated criteria. It does not establish compliance, equivalence, endorsement or certification.
What it coversGAISSF-CRO-028 maps all 59 GAISSF v1.0 controls to all 64 DORA articles through 236 outcome-based records. It supports readiness planning, evidence reuse and gap analysis, but does not establish legal compliance or supervisory acceptance.
Use it whenThe crosswalk supports financial entities, ICT third-party providers, security teams, risk functions and assessors in relating GAISSF controls to DORA requirements.
Scope and limitsThe article mapping is distinct from Level 2 technical standards, supervisory expectations, contractual negotiations and evidence of operating effectiveness. Similar terminology does not establish equivalence.
Edition mappedRegulation (EU) 2022/2554 (DORA)
Revision history
| Date (as stated) | Event | What changed |
|---|---|---|
| 29 June 2026 | Publication | Published as v1.0Source: Page metadata (/crosswalks/cro-028-dora/) |
| 06 October 2026 | Document revision | Draft for Publication issued, public and in full; independent crosswalk review openSource: GAISSF-CRO-028_GAISSF-DORA-Mapping_v1.0.pdf |
| 7 October 2026 | File correction | Mapping register: GAISSF-NOR-001 and NOR-004 relabelled "Published normative source" (were "Internal controlled source")Source: GAISSF-CRO-028_GAISSF-DORA_Mapping_Register_v1.0.xlsx |
Website record last updated 7 October 2026. This is the web page, not the document.
More from GAISSF™
| SEC-047 | GAISSF™ Telecommunications Sector Implementation Guide |
| NOR-001 | GAISSF™ Framework Standard |
| NOR-002 | GAISSF™ Executive Summary |
| NOR-003 | GAISSF™ Quick Start Guide |
Cite this document
ODA3 Institute. GAISSF™ to DORA Crosswalk (GAISSF-CRO-028), v1.0. Published 29 June 2026. docs.oda3.org/documents/cro-028/
ODA3 Institute. GAISSF™ to DORA Crosswalk (GAISSF-CRO-028), v1.0. Published 29 June 2026. docs.oda3.org/documents/cro-028/