Cybersecurity

Digital Operational Resilience Act (DORA)

NEW:  The Digital Operational Resilience Act (DORA) Playbook.

Enacted by the EU on January 14, 2022, DORA has been in force since January 17, 2025.

DORA is a regulatory measure enacted by the European Union to establish a mandatory framework for managing information and communication technology (ICT) risks within the EU financial industry.

While primarily targeting financial institutions in the European Union, DORA's impact extends globally. Businesses worldwide, especially those providing critical ICT services to the EU’s financial sector, may need to comply with DORA's regulations regardless of the location of their headquarters.

The Digital Operational Resilience Act  (DORA) Playbook addresses the following:

  • Pillar 1:  Risk Management
  • Pillar 2:  Incident Reporting
  • Pillar 3:  Digital Operational Resilience Testing
  • Pillar 4:  Managing of ICT Third–Party Risk
  • Pillar 5:  Information Sharing and Oversight

Back (Small2)