DORA

In short: DORA (Digital Operational Resilience Act) is the EU regulation on digital operational resilience in the financial sector.

In more detail: It has applied since 17 January 2025 to banks, insurers, payment services and many IT service providers.

In Depth

Duties

ICT risk management, reporting of major incidents, resilience testing, management of third-party providers. See NIS-2, online banking.

See also: NIS2, Online Banking, CIA Triad