Digital Operational Resilience Act (DORA)
DORA is part of the European Commission’s Digital Finance Strategy designed to uplift existing information communications technology (“ICT”) risk management requirements for financial entities and to consolidate these requirements into a single legislative instrument.
The Act comes into force on 17 January 2025 and applies to a wide range of financial entities, including credit institutions, electronic money institutions, investment firms, insurance undertakings and re-insurance undertakings. Importantly, DORA will also result in certain major ICT service providers formally coming within scope of supervision by the European Supervisory Authorities for the first time.
Technical Standards
DORA will be supported by technical standards that provide regulatory guidance in respect of certain key areas under the Act and will be helpful for many organisations as they begin to ramp up their DORA compliance projects in coming months. Please see our briefings and podcast below for more information.
Our Knowledge
DORA: Who, What and When for Fund Managers
DORA Spotlight: Practical insights on the second batch of draft technical standards
New draft technical standards provide useful guidance for DORA compliance projects
Key considerations for fintech providers
Digital Operational Resilience Act
