IT, data & continuous
Digital Operational Resilience Act (DORA)
EU regulation (Regulation 2022/2554) effective from January 2025, addressing ICT risk management and operational resilience in financial institutions. DORA requires structured risk management, incident response testing, and cyber threat management. It applies to banks, insurers, and investment firms.
Source: EU DORA 2025