DORA / financial sector

Digital resilience as an operational discipline.

DORA brings ICT risk, incidents, testing and third parties into one operating framework.

Book a consultation

What is DORA

One resilience framework for financial entities.

Regulation (EU) 2022/2554 on digital operational resilience primarily applies to financial entities and, depending on scope, relevant ICT third-party providers.

Readiness requires processes, ownership, testing and evidence that support both everyday operations and incident response.

This content is informational and is not legal advice or an individual regulatory assessment.

Five areas

From risk to demonstrable recovery.

01

ICT risk management

We assess setup, ownership, evidence and dependencies against real services and suppliers.

02

ICT incident classification and reporting

We assess setup, ownership, evidence and dependencies against real services and suppliers.

03

Digital operational resilience testing

We assess setup, ownership, evidence and dependencies against real services and suppliers.

04

ICT third-party risk

We assess setup, ownership, evidence and dependencies against real services and suppliers.

05

Threat intelligence sharing

We assess setup, ownership, evidence and dependencies against real services and suppliers.