Research unit logo

DORA Maturity Index

Benchmarks from the DORA Maturity 2026 survey.

This benchmark examines how organizations in regulated industries are implementing DORA (Digital Operational Resilience Act) requirements using ServiceNow. It covers CIF identification and classification, CMDB data quality, DORA Registry setup, incident reporting workflows, governance accountability, and skills readiness. The goal is to understand how far organizations have progressed in aligning their ServiceNow platform with DORA obligations.

Compare your own results

Take the survey to compare your results with benchmark data.

Take the survey

Incident Reporting Workflow

Does your organization have a defined workflow for reporting ICT-related incidents to regulators per DORA requirements?

Major Incidents Linked to CIFs

Are major incidents tracked in ServiceNow with links to CIFs and regulatory reporting obligations?

Service Owners Exist

Does your organization have Service Owners responsible for mapping services in the CMDB?

Process Owner Accountability

Are critical process owners formally accountable for keeping ServiceNow data up to date?

Internal Review Frequency

How often are internal reviews performed to ensure DORA compliance in ServiceNow?

Business / IT Misalignment

How frequently is there misalignment between business and IT on critical process identification?

Skills Gap

How significant is the skills gap in using ServiceNow for DORA compliance?

Integration Gaps Between ServiceNow Modules

Are there integration gaps between ServiceNow modules (ITOM, CMDB, BCM, Contract Management) affecting DORA compliance?