If your organisation is already certified to ISO 27001, this will provide a strong starting point for compliance with DORA, as the two cover very similar ground.  However, DORA also contains other, much more specific requirements that are not included within ISO 27001, particularly in the areas of incident reporting, resilience testing and third-party risk management.

DORA - The Digital Operations Resilience Act

Published on
5 Jun
2025

URM’s blog discusses the EU’s Digital Operation’s Resilience Act (DORA), explaining who it will apply to, its requirements, how it will be enforced, and more.

Read more
"
Our experience with the QSA team has been fantastic over the last 3 years. Our QSA has enabled us to refine the PCI audit process, whilst also improving our security posture. His guidance also made the transition process from version 3.2.1 to 4.0 extremely smooth.
contact US

Let us help you

Let us help you in your compliance journey by completing the form and letting us know how we can best support you.