RSAC™ Membership Library

Are You DORA Compliant? 5 Essential Elements of a Strong Third-Party Risk Strategy

Greg McDonough ● February 13, 2025



In January 2025, the European Union (EU) enacted its Digital Operational Resilience Act (DORA) as a means of ensuring that the financial industry and its third-party information and communication technology (ICT) service providers are adequately defended against cyberattacks and sufficiently resilient to continue operations in the face of sustained interference. The financial sector encompasses a wide variety of businesses from insurance companies and banks to crypto service providers. This is a step in the right direction for the EU in terms of creating greater safety and security within its financial sector, but it also means that those within the EU, and foreign companies wishing to provide services to the industry, must become compliant with the regulations outlined within DORA.

Login/Signup to Continue Reading