Are You DORA Compliant? 5 Essential Elements of a Strong Third-Party Risk Strategy
Greg McDonough ● February 13, 2025
In January 2025, the European Union (EU) enacted its Digital Operational Resilience Act (DORA) as a means of ensuring that the financial industry and its third-party information and communication technology (ICT) service providers are adequately defended against cyberattacks and sufficiently resilient to continue operations in the face of sustained interference. The financial sector encompasses a wide variety of businesses from insurance companies and banks to crypto service providers. This is a step in the right direction for the EU in terms of creating greater safety and security within its financial sector, but it also means that those within the EU, and foreign companies wishing to provide services to the industry, must become compliant with the regulations outlined within DORA.