What Is DORA?
The Digital Operations Resilience Act (DORA) is a piece of EU legislation relating to the cyber security and digital of financial institutions...
Which Organisations Does DORA Apply to?
DORA is applicable to a wide range of organisations in the financial sector, including banks, insurance companies...
How does DORA differ from ISO 27001?
If your organisation is already certified to ISO 27001, this will provide a strong starting point for compliance with DORA, as the two cover...
How is DORA structured?
DORA is structured around five core ‘pillars’ that relate to ICT and cyber security, which aim to provide a comprehensive digital resiliency framework for financial organisations...
What are the regulatory technical standards (RTS) and implementing technical standards (ITS)?
In addition to DORA itself, the European Supervisory Authorities (ESAs) have produced a number of regulatory technical standards (RTS)...
How is DORA enforced?
DORA is enforced by designated regulators in each EU member state, known as competent authorities. These competent authorities can request that financial organisations implement...

DORA - The Digital Operations Resilience Act
URM’s blog discusses the EU’s Digital Operation’s Resilience Act (DORA), explaining who it will apply to, its requirements, how it will be enforced, and more.
Read URM’s blog, where we explore the importance of clock synchronisation for cyber security and resilience, and how to meet the requirements of Control 8.17.
URM’s blog explores Clause 5.1 of ISO 27001, what you must do to meet its requirements, and why leadership & commitment are vital to an effective ISMS.
URM’s blog examines how ransomware occur, and highlights practical cyber security measures you can implement to reduce your exposure and mitigate security risk.

