With less than six months to go, the race to DORA compliance is on. Our day one roadmap identifies and prioritises critical actions you need to take within four of DORA's main pillars:
- ICT risk management
- ICT third-party risk management
- Digital operational resilience testing
- ICT-related incident management and reporting
Our goal? To enable you to define what a proportionate approach to DORA looks like for your organisation – and focus on the highest value activities for evidencing compliance with the spirit and principle of the regulation.
Work across these pillars (as well as the fifth information sharing pillar) will continue past January 2025. However, the actions detailed in this guide will set a day one baseline on which you can continue to build going forward.
Related Insights
Turn DORA compliance into advantage
You might see it as a regulatory box-ticking exercise, but how you approach DORA could define a long-lasting approach that can significantly accelerate your response to other upcoming regulations.
Read more
DORA: What you need to know
New regulation can be hard to get your head around—especially when it’s as wide-ranging as DORA. Here’s everything you need to know about the new regulation.
Read more
DORA: Five actions you must take
How you approach DORA will likely define how you respond to upcoming regulations. We’ve spoken to hundreds of industry leaders and combined with our deep digital risk and resilience expertise; we share five priority actions you should take.
Read more
DORA: Your questions, answered
Everything you need to know about DORA. We answer your frequently asked questions about the EU's Digital Operational Resilience Act.
Read moreRelated Case Studies
Delivering regulatory change for UK building society
How can a UK building society deliver regulatory change while ensuring a great customer experience?
Read more
Keeping large-scale capital investment on track
How do you independently assess the governance and maturity of a multi-billion program?
Read more
Equipping a UK building society to fight financial crime
How do you create a technology platform that can stay one step ahead of financial criminals?
Read more
Using regulatory change as an opportunity to strengthen and rationalise internal controls
As UK regulators plan an Internal Controls and Governance directive, this major insurer seized the opportunity to achieve its long-term ambition.
Read more