When reviewing these definitions, it is also vital to understand the exemptions under DORA – whether certain entities are entirely excluded from compliance or subject to simplified ICT risk ...