{"id":101397,"date":"2025-06-18T09:00:00","date_gmt":"2025-06-18T07:00:00","guid":{"rendered":"https:\/\/eiposgrados.com\/?p=101397"},"modified":"2025-06-14T01:49:40","modified_gmt":"2025-06-13T23:49:40","slug":"dora","status":"publish","type":"post","link":"https:\/\/eiposgrados.com\/eng\/blog-dpo\/dora\/","title":{"rendered":"Dora"},"content":{"rendered":"

Dora<\/strong><\/h2>\n\n\n\n

From 17 January 2025, European Union (EU) financial institutions and, as soon as designated, third-party ICT service providers designated as \u201ccritical\u201d by European Supervisory Authorities must be prepared to comply with the Digital Operational Resilience Act (Regulation (EU) 2022\/2554 \u2013 \u201cDORA\u201d). DORA standardizes how financial institutions report cybersecurity incidents, test their digital operational resilience, and manage third-party risk in the financial services sector and in<\/p>\n\n\n\n

\"Dora\"<\/figure>\n\n\n\n

Key aspects of the DORA regulation:<\/p>\n\n\n\n

Operational resilience:<\/strong><\/p>\n\n\n\n

Financial institutions must have processes and systems that enable them to withstand and respond to operational disruptions.<\/p>\n\n\n\n

ICT Risk Management:<\/strong><\/p>\n\n\n\n

A framework is established to identify, assess, and mitigate risks related to information and communications technologies.<\/p>\n\n\n\n

Supervision and coordination:<\/strong><\/p>\n\n\n\n

National and European supervisory authorities must coordinate to ensure compliance with the regulations.<\/p>\n\n\n\n

Transparency and responsibility:<\/strong><\/p>\n\n\n\n

Financial institutions must be transparent about their ICT risk management and take steps to mitigate these risks.<\/p>\n\n\n\n

Impact of the DORA regulation:<\/strong><\/h2>\n\n\n\n

Greater security:<\/strong><\/p>\n\n\n\n

The regulation seeks to reduce the financial sector's vulnerability to digital threats.<\/p>\n\n\n\n

Mandatory compliance:<\/strong><\/p>\n\n\n\n

Financial institutions must adapt to new regulations, including incident management, audits, and system testing.<\/p>\n\n\n\n

Greater coordination:<\/strong><\/p>\n\n\n\n

The regulation facilitates collaboration between supervisory authorities and financial sector stakeholders.<\/p>\n\n\n\n

Mandatory DORA complements:<\/strong><\/p>\n\n\n\n

Three European Supervisory Authorities (ESAs), EBA, EIOPA and ESMA, published on 17\/01\/2024 the first set of final draft technical standards under DORA, aimed at enhancing the digital operational resilience of the EU financial sector by strengthening financial institutions' information and communication technologies (ICT) and third-party risk management and incident reporting frameworks.<\/p>\n\n\n\n

In order to comply with the sections ICT Risk Management Framework, ICT-Related Incidents, Resilience Testing Program within the ICT Risk Management Framework, Management of ICT-Related Risk Derived from Third Parties, Contracts with ICT Service Providers, the following technical standards projects are being defined:<\/p>\n\n\n\n