DORA – Digital Operational Resilience Act
DORA explained: EU regulation on digital operational resilience in the financial sector – who it affects and what IT service providers need to consider.
IT Glossary
In brief
DORA (Digital Operational Resilience Act) is the EU regulation on digital operational resilience in the financial sector. It has applied since 17 January 2025 and is aimed at banks, insurers, payment service providers, asset management companies and other financial entities.
The requirements include ICT risk management, reporting of major ICT-related incidents, regular resilience testing, and structured management of ICT third-party risks, including mandatory contractual content and a register of all service providers.
For IT service providers, this means that anyone supporting financial entities is bound by contract, for instance regarding exit strategies, audit rights and reporting channels. In terms of content, much of this overlaps with NIS2 and an ISMS.
Solutions in a new dimension.
One conversation is enough to find out where IT, Microsoft Cloud and AI can take real weight off day-to-day business.
Your contact: Daniel Penninger, Managing Director