The Digital Operational Resilience Act (DORA) came into force in
January 2023 and has been adopted since 17 January 2025. This
regulation is seen as a game changer in the regulatory landscape
due to:
- The broad spectrum of financial entities in scope which
includes credit institutions, insurance undertakings, investment
firms, alternative investment fund managers and many more as
defined under DORA Article 2.
- The uniformity in expectations set across multiple
industries.
- Its extension and explicit requirements for managing ICT
(information and communication technology) third-party risk.
Digital advancements or technology transformation has been
increasingly identified in strategic initiatives. Common objectives
identified are enhancing the customer experience offering digital
channels to enjoy services offered, as well as to optimise internal
method of operations. Such transformation causes new or additional
risks to emerge, many of which are intended to be
