Citigroup.com Homepage

DORA: The EU’S New Regulatory Framework on Digital Operational Resilience

The Digital Operational Resilience Act (DORA) and the DORA Amending Directive entered into force on 16 January 2023 and will apply from 17 January 2025.

DORA sets uniform requirements for the security of network and information systems of companies and organisations operating in the financial sector as well as critical third parties which provide Information Communication Technology (ICT)-related services to them, such as cloud platforms or data analytics services.

 

DORA creates a regulatory framework on digital operational resilience whereby all firms need to make sure they can withstand, respond to and recover from all types of ICT-related disruptions and threats. These requirements are homogenous across all EU member states. The core aim is to prevent and mitigate cyber threats.

Click here to view the report in full.

Subscribe

Sign up to receive our newsletter providing a roundup of recent content and updates on new reports.

Sign up to receive the latest news from Citi.