ARTICLE · 02 JANUARY 2025

Market Intelligence Thought Leadership Award Winner

EU DORA: Are You In Scope, And If So, How Can You Prepare?

King & Spalding

Contributor

King & Spalding

Celebrating more than 130 years of service, King & Spalding is a global law firm that represents a...

View firm profile

Explore more from King & Spalding

The Digital Operational Resilience Act (DORA) establishes a harmonised and comprehensive framework for information and communication technology (ICT) risk management in the financial sector.

European UnionTechnology

Eve-Christie Vermynck

Aadam Sattar

The Digital Operational Resilience Act (DORA) establishes a harmonised and comprehensive framework for information and communication technology (ICT) risk management in the financial sector. It is a directly applicable EU regulation designed to ensure that financial institutions within the European Union can withstand, respond to, and recover from ICT-related disruptions and threats. DORA came into effect on 16 January 2023 and will apply as of 17 January 2025.

Reliance on ICT across the financial sector has introduced new vulnerabilities, making the ecosystem more susceptible to systemic cyber risks within the EU and internationally. An ICT disruption can have cascading effects on the performance, integrity and stability of the financial system and its adjacent industries. As financial services are deployed across multiple jurisdictions, the lack of a unified regulatory framework for ICT risks creates inconsistencies and cost-ineffective implementation of

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

EU DORA: Are You In Scope, And If So, How Can You Prepare?

Related Articles

The Next Data Breach May Start With A Conversation

Picture This: ClickFix Hides Malware In An Image

Patrolling The Perimeter: Final FCA Perimeter Guidance And Amendments To The UK Cryptoasset Regulations

Cyber Monthly Wrap-up (UK, EMEA And The US) – October 2026

AI In EDiscovery: Knowing When And How To Use It

Read more about

Related Comparative Guides

Blockchain & Crypto Assets

Artificial Intelligence

Fintech

See more popular content from

Be Nice To Claude: Anthropic's Acceptable Use Policy Updates

The Latest Scottish Tech Industry Survey Results At A Glance

EU Digital Omnibus On AI Enters Into Force

AI In Advertising: Do I Need To Label My AI-generated Ad?

Celsius vs Tether: Court Ruling Marks Key Moment In Cross-Border Crypto Litigation

The UK Cyber Security And Resilience Bill: What You Need To Know

The EU’s New AI Transparency Rules: What You Need To Know

The EU AI Act’s Transparency Rules Are Now Live: What Organisations Need To Do

Cyber Security And Resilience Bill: What's The Latest And What Should Businesses Do Now?

‘One Engine, Configured A Thousand Different Ways’ – Is Claude For Legal The Next Big Shift In Legal Tech?

FDA Releases Draft Guidance On Submission Recommendations For AI-Enabled Device Software Functions

Divided Ninth Circuit Panel Reaffirms "Ponzi Scheme Presumption" Of Intent To Defraud In Fraudulent Transfer Action

USTR Initiates New Process To Request Exclusions From The Section 301 China Tariffs For "Certain Machinery Used In Domestic Manufacturing"

PCAOB Sanctions Four Audit Firms For Violations Related To Required Audit Committee Communications

DOJ Issues Final Rule Restricting Foreign Access To U.S. Data

119th Congress House Rules – Key Oversight Provisions

FDA Issues Draft Guidance On Accelerated Approval Focused On How The Agency Will Implement New Authorities

PCAOB Staff Outline 2025 Inspection Priorities

PCAOB Sanctions Chinese Public Accounting Firm For Violations Of PCAOB Reporting And Cooperation Requirements

Saudi Arabia Issues Real Estate Transaction Tax (RETT) Law