IT, data & continuous
Cybersecurity Audit (DORA/NIS2)
Audit domain specialized in risk assessment and compliance testing of cybersecurity under EU regulations. DORA (Digital Operational Resilience Act) applies to financial institutions since January 2025. NIS2 applies to essential services since October 2024 (compliance October 2026). Both require audits of access controls, incident response, business continuity, and monitoring.
Source: EU DORA, EU NIS2 Directive