DORA (the Digital Operational Resilience Act or Regulation
2022/2554) and the DORA Amending Directive (Directive 2022/2556)
shall apply from 17 January 2025. The MFSA
has just published an open letter to all Board members and CEOs of
financial entities falling within scope of DORA outlining
its minimum expectations in relation to their
preparedness to the aforementioned upcoming laws.
Considering DORA's wide scope, this letter is addressed to
the management teams of almost all entities authorised by the MFSA
including banks; financial
institutions; investment
firms; crypto-asset service
providers; managers of alternative investment
funds; insurance and
reinsurance undertakings; institutions
for occupational retirement provision;
and crowdfunding service providers.
