The Final Countdown: Complying With The Digital Operational Resilience Act (DORA)

In-scope firms (such as investment firms, insurance undertakings, management companies, credit institutions, crypto-asset service providers, payment institutions and electronic money institutions) must comply with the Digital Operational Resilience Act ("DORA") by 17 January 2025.

As well as imposing requirements on financial entities, DORA also imposes requirements on ICT third-party service providers.

Could you be a critical ICT third-party servicer provider?

Whether an entity could be a critical ICT third-party service providers depends on whether:

1. the entity has a systemic impact on the provision of financial services;
2. the importance of the EU financial entities relying on the entity;