Topic
DORA
articles.
DORA and NIS2 Overlap: Building One Evidence Layer for Dual-Regulated Financial Entities
DORA takes precedence over NIS2 for financial entities, but mixed groups and ICT providers still answer to both. How to collect evidence once and report it twice.
DORA's First Oversight Cycle: What CTPP Designation Means for the Firms That Depend on Them
The ESAs named their first critical ICT third-party providers. Most of the commentary focused on the providers. The more interesting consequences land on their customers.
DORA's Register of Information: The Third-Party Risk Deadline Most Financial Firms Are Quietly Missing
The Register of Information is the least discussed and most operationally demanding requirement in DORA. Here is why it keeps tripping up firms that consider themselves compliant.
DORA ICT Third-Party Risk Management: The Technical Implementation Guide for 2026
DORA is in full effect for EU financial entities. The ICT third-party risk management requirements are the hardest to operationalise. Here is how.
DORA Compliance in 2026: How Financial Institutions Build Defensible Resilience
With DORA now in full enforcement, financial institutions need more than paper policies - they need verifiable, audit-ready evidence that holds up under supervisory scrutiny.
No articles found. Try a different term.
Explore other categories to find relevant content
Stay in the loop
Cyber-resilience
insights.
Get cyber-resilience insights in your inbox. Practical, audit-ready guidance on data integrity, compliance and continuity, delivered as we publish.