An interdisciplinary approach between firms and their service providers is crucial to successfully "tame" DORA says PJ Di Giammarino of JWG.
EU DORA RTS - ICT risk management framework
Specifies the requirements for ICT security policies, procedures, protocols and tools. Sets out the simplified ICT risk management framework intended to ensure some flexibility in complying with DORA requirements is available to financial entities depending on their particular size, structure, internal organization and in the nature and complexity of their activities.
Notable
Latest News
Notable
Managing ICT third-party risk under DORA
Requirements imposed on financial services institutions when procuring ICT services from third parties - regulation and best practice.
Your DORA questions answered – Business resilience more broadly
This fifth of a series of articles covering a practical session organised by Ashurst focuses on business resilience questions connected to DORA.
Latest News
More on DORA
-
ESAs make progress on critical ICT third-party oversight framework
ICT providers designated critical under DORA will get six weeks to challenge the designation.
-
EBA narrows existing ICT guidelines
DORA ICT risk management requirements apply to financial entities in their place.
-
Why tech, process and people are top of mind for CISO Laurence Lafond
In this second part of our discussion with Lafond, he refers to internal threats, side-channel attacks, vendor risks and having a well-equipped incident response plan and team.
-
DORA: Navigating the path ahead
With DORA now in effect, the EU’s financial sector is entering a new phase of operational resilience obligations, where firms must shift from preparation to action.
-
Facing up to the challenge as the age of DORA dawns
The absence of a transitional period presents a challenge for firms and third parties.
-
XLOD London 2024: What’s next for operational resilience?
Experts from Morgan Stanley, BNY, Nomura and First Abu Dhabi Bank discussed this key issue at the leading compliance industry event.
-
1LoD report points to key regulatory trends in 2025
Regulatory preparedness, resilience and evolving challenges among the topics covered in an insightful and data-rich document.
-
Counting down to DORA compliance
Developments include: potential standardization of threat-led penetration testing, new oversight director for DORA and ESA's work program.