DORA

Frequently Asked Questions

What Is DORA?

The Digital Operations Resilience Act (DORA) is a piece of EU legislation relating to the cyber security and digital of financial institutions...

Read more

Which Organisations Does DORA Apply to?

DORA is applicable to a wide range of organisations in the financial sector, including banks, insurance companies...

Read more

‍How does DORA differ from ISO 27001?

If your organisation is already certified to ISO 27001, this will provide a strong starting point for compliance with DORA, as the two cover...

Read more

How is DORA structured?

DORA is structured around five core ‘pillars’ that relate to ICT and cyber security, which aim to provide a comprehensive digital resiliency framework for financial organisations...

Read more

What are the regulatory technical standards (RTS) and implementing technical standards (ITS)?

In addition to DORA itself, the European Supervisory Authorities (ESAs) have produced a number of regulatory technical standards (RTS)...

Read more

How is DORA enforced?

DORA is enforced by designated regulators in each EU member state, known as competent authorities.  These competent authorities can request that financial organisations implement...

Read more

DORA - The Digital Operations Resilience Act

Published on
5 Jun
2025

URM’s blog discusses the EU’s Digital Operation’s Resilience Act (DORA), explaining who it will apply to, its requirements, how it will be enforced, and more.

Read more
Thumbnail of the Blog Illustration
Information Security
Published on
3/7/2026
ISO 27001 Clause 8.1: Effective ISMS operational planning and control

URM’s blog explains the requirements of ISO 27001 Clause 8.1 and why it matters, as well as sharing key insights on how to properly implement it in practice.

Read more
Thumbnail of the Blog Illustration
Information Security
Published on
17/6/2026
ISO 27001 Clause 10.2: Nonconformity and corrective action

URM’s blog explains how to meet ISO 27001 Clause 10.2, including finding nonconformities, performing root cause analysis, implementing corrective actions & more

Read more
Thumbnail of the Blog Illustration
Information Security
Published on
27/4/2026
ISO 27001 Clause 7.5: Documented Information Explained

URM’s blog breaks down ISO 27001 Clause 7.5 requirements, with practical guidance on how to achieve conformance to this Clause & what external assessors expect.

Read more
"
The course was educational but fun, everyone was engaged, and I believe all who attended would now be able to complete an internal audit. The trainer would be our first choice of a tutor for our next ISO training.
contact US

Let us help you

Let us help you in your compliance journey by completing the form and letting us know how we can best support you.