The Digital Operations Resilience Act (DORA) is a piece of EU legislation relating to the cyber security and digital of financial institutions.  Historically, financial organisations have managed much of their operational risk by taking measures to ensure their financial security (i.e., holding enough capital to ensure they can withstand economic downturns), and there are a number of EU and member state laws and regulations that govern and assure this.  

However, such measures do not cover ICT-related resilience, despite information and cyber security incidents also having the potential to cause serious disruption for financial organisations.  DORA is aimed at addressing this issue by ensuring that financial institutions have the capability to protect against, detect, contain, recover from and repair following ICT-related incidents.

DORA - The Digital Operations Resilience Act

Published on
5 Jun
2025

URM’s blog discusses the EU’s Digital Operation’s Resilience Act (DORA), explaining who it will apply to, its requirements, how it will be enforced, and more.

Read more
"
The whole gap analysis process was very informative for all departments of the business. Our URM consultant was great at explaining the SOC2 audit process and what evidence may be required for each area. As a business, it has really assisted us in our implementation strategy and improving our compliance programme as a whole.
contact US

Let us help you

Let us help you in your compliance journey by completing the form and letting us know how we can best support you.