Massive transformation in cybersecurity standards in the financial sector

As of 17 January 2025, DORA has officially come into force, requiring financial institutions to undergo major verification to ensure that their implemented measures comply with the new regulation.

The introduction of DORA also presents a huge challenge for ICT service providers, who must adapt their services to the new requirements. This is particularly complex for providers serving multiple financial entities, as it necessitates alignment with diverse organisational needs.

The FIVE key requirements of DORA include:

1. Conducting extensive risk assessments;

2. Implementing an ICT risk management framework;

3. Organising ICT incident response processes;

4. Conducting digital operational resilience testing;

5. Overseeing critical third-party ICT providers.

Whether you are a financial sector entity or an ICT service provider, 2025 will be a year of refining solutions to ensure full compliance with these regulatory requirements.