{"id":193102,"date":"2025-02-19T06:30:00","date_gmt":"2025-02-19T05:30:00","guid":{"rendered":"https:\/\/datascientest.com\/en\/?p=193102"},"modified":"2025-02-15T16:58:09","modified_gmt":"2025-02-15T15:58:09","slug":"all-about-regulation-dora","status":"publish","type":"post","link":"https:\/\/datascientest.com\/en\/all-about-regulation-dora","title":{"rendered":"What is the Digital Operational Resilience Act?"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"193102\" class=\"elementor elementor-193102\" data-elementor-post-type=\"post\">\n\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-a3ae42e e-flex e-con-boxed e-con\" data-id=\"a3ae42e\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-89c5011 elementor-widget elementor-widget-text-editor\" data-id=\"89c5011\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.15.0 - 02-08-2023 *\/\n.elementor-widget-text-editor.elementor-drop-cap-view-stacked .elementor-drop-cap{background-color:#69727d;color:#fff}.elementor-widget-text-editor.elementor-drop-cap-view-framed .elementor-drop-cap{color:#69727d;border:3px solid;background-color:transparent}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap{margin-top:8px}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap-letter{width:1em;height:1em}.elementor-widget-text-editor .elementor-drop-cap{float:left;text-align:center;line-height:1;font-size:50px}.elementor-widget-text-editor .elementor-drop-cap-letter{display:inline-block}<\/style>\t\t\t\t<p><b>The new DORA regulation is part of a European initiative aimed at enhancing the cybersecurity and operational resilience of companies engaged in financial activities. The European Union wants this initiative to be viewed more as an opportunity than a constraint.<\/b><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1506eb6 elementor-widget elementor-widget-text-editor\" data-id=\"1506eb6\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><b>Resilience<\/b><span style=\"font-weight: 400;\"> is a popular term these days. Amid challenges that some might face, it is advisable to be resilient, meaning capable of absorbing disruptions and quickly recovering.<\/span><\/p><p><span style=\"font-weight: 400;\">What about companies? Isn&#8217;t it equally important for them to demonstrate resilience in the case of temporary IT malfunctions or even cyberattacks?<\/span><\/p><p><span style=\"font-weight: 400;\">It is agreed that this resilience capability becomes even more crucial when the IT at stake belongs to a bank or <a href=\"https:\/\/datascientest.com\/en\/cryptocurrency-trading-training-become-a-trading-expert-or-create-your-own-crypto\">a cryptocurrency provider<\/a>. The inability to access one\u2019s assets in <\/span><b>euros<\/b><span style=\"font-weight: 400;\"> as well as in <\/span><b>bitcoin<\/b><span style=\"font-weight: 400;\"> or <\/span><b>ethereum<\/b><span style=\"font-weight: 400;\"> can be a significant source of concern.<\/span><\/p><p><span style=\"font-weight: 400;\">In response to these challenges, the European Union has implemented DORA (Digital Operational Resilience), a regulation specifically aimed at ensuring <\/span><b>the continuity and security of financial activities<\/b><span style=\"font-weight: 400;\">.<\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-072af79 e-flex e-con-boxed e-con\" data-id=\"072af79\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-04efdba elementor-widget elementor-widget-heading\" data-id=\"04efdba\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.15.0 - 02-08-2023 *\/\n.elementor-heading-title{padding:0;margin:0;line-height:1}.elementor-widget-heading .elementor-heading-title[class*=elementor-size-]>a{color:inherit;font-size:inherit;line-height:inherit}.elementor-widget-heading .elementor-heading-title.elementor-size-small{font-size:15px}.elementor-widget-heading .elementor-heading-title.elementor-size-medium{font-size:19px}.elementor-widget-heading .elementor-heading-title.elementor-size-large{font-size:29px}.elementor-widget-heading .elementor-heading-title.elementor-size-xl{font-size:39px}.elementor-widget-heading .elementor-heading-title.elementor-size-xxl{font-size:59px}<\/style><h3 class=\"elementor-heading-title elementor-size-default\">The Birth of DORA<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-915abce elementor-widget elementor-widget-text-editor\" data-id=\"915abce\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">At the end of September 2020, the European Commission published the <\/span><b>Digital Operational Resilience<\/b><span style=\"font-weight: 400;\"> project, a series of measures aimed at enhancing the digital efficiency of the financial sector.<\/span><\/p><p><span style=\"font-weight: 400;\">The goal was to unify European standards and requirements to <\/span><b>create a harmonized and comprehensive framework concerning the digital operational resilience of financial entities<\/b><span style=\"font-weight: 400;\">. DORA aims to promote the quick detection of major IT incidents, a rapid recovery ability, and also an analysis of causes of disruption, alongside a mandatory reporting obligation.<\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-c0f74d8 e-flex e-con-boxed e-con\" data-id=\"c0f74d8\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-4f99493 elementor-widget elementor-widget-heading\" data-id=\"4f99493\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Cyberattacks with Major Consequences<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3ef1bab elementor-widget elementor-widget-image\" data-id=\"3ef1bab\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.15.0 - 02-08-2023 *\/\n.elementor-widget-image{text-align:center}.elementor-widget-image a{display:inline-block}.elementor-widget-image a img[src$=\".svg\"]{width:48px}.elementor-widget-image img{vertical-align:middle;display:inline-block}<\/style>\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"1000\" height=\"571\" src=\"https:\/\/datascientest.com\/en\/files\/2025\/01\/Regulation-DORA-DataScientest-1.webp\" class=\"attachment-full size-full wp-image-193107\" alt=\"\" srcset=\"https:\/\/datascientest.com\/en\/files\/2025\/01\/Regulation-DORA-DataScientest-1.webp 1000w, https:\/\/datascientest.com\/en\/files\/2025\/01\/Regulation-DORA-DataScientest-1-300x171.webp 300w, https:\/\/datascientest.com\/en\/files\/2025\/01\/Regulation-DORA-DataScientest-1-768x439.webp 768w\" sizes=\"(max-width: 1000px) 100vw, 1000px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-31b5e21 elementor-widget elementor-widget-text-editor\" data-id=\"31b5e21\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">This regulatory framework was made necessary by the increasing risks posed by <\/span><b>the digital transformation of financial services<\/b><span style=\"font-weight: 400;\"> and the growing interconnection of networks. It turned out that numerous cyberattacks have had enormous consequences for renowned institutions.<\/span><\/p><ul><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">In 2014, JP Morgan Chase, one of the largest banks in the USA, suffered a breach resulting in the compromise of over 80 million identities.<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Two years later, the hacking of the interbank messaging system <a href=\"https:\/\/www.swift.com\/fr\/swift-en-francais\">SWIFT<\/a> allowed the diversion of 81 million dollars from the central bank of Bangladesh.<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">During the same year, 2016, Tesco Bank, a UK institution, was the victim of a cyberattack that affected 9,000 customer accounts and enabled hackers to steal about 2.5 million pounds sterling.<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">In 2017, 140 million articles from Equifax, one of the main American credit agencies, were hacked, providing access to social security numbers, birth dates, and other personal data.<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">In 2019, a security breach of the American bank Capital One&#8217;s system allowed access to the personal data of about 100 million customers and credit card applicants.<\/span><\/li><\/ul>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d4665af elementor-align-center button-principal elementor-widget elementor-widget-button\" data-id=\"d4665af\" data-element_type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-button-wrapper\">\n\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-sm\" href=\"https:\/\/datascientest.com\/en\/data-courses\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t<span class=\"elementor-button-text\">Learning to identify cyber threats<\/span>\n\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ddccb2c elementor-widget elementor-widget-text-editor\" data-id=\"ddccb2c\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">Most of these companies endured the fallout from such cyberattacks on their reputation, with public trust often negatively impacted due to the lack of a quick response.<\/span><\/p><p><span style=\"font-weight: 400;\">It is agreed that such incidents could only advocate for the <\/span><b>establishment of rules<\/b><span style=\"font-weight: 400;\"> to ensure the safety and continuity of financial operations.<\/span><\/p><p><span style=\"font-weight: 400;\">The DORA regulation was adopted by the European Parliament on November 10, 2022, then by the EU Council, and subsequently published in the Official Journal.<\/span><\/p><p><span style=\"font-weight: 400;\">Since January 17, 2025, DORA has been in effect in all EU member states.<\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-7c2eb7b e-flex e-con-boxed e-con\" data-id=\"7c2eb7b\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-5a17412 elementor-widget elementor-widget-heading\" data-id=\"5a17412\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Who is Affected by DORA?<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f21c84a elementor-widget elementor-widget-image\" data-id=\"f21c84a\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"1000\" height=\"571\" src=\"https:\/\/datascientest.com\/en\/files\/2025\/01\/Regulation-DORA-DataScientest-2.webp\" class=\"attachment-full size-full wp-image-193106\" alt=\"\" srcset=\"https:\/\/datascientest.com\/en\/files\/2025\/01\/Regulation-DORA-DataScientest-2.webp 1000w, https:\/\/datascientest.com\/en\/files\/2025\/01\/Regulation-DORA-DataScientest-2-300x171.webp 300w, https:\/\/datascientest.com\/en\/files\/2025\/01\/Regulation-DORA-DataScientest-2-768x439.webp 768w\" sizes=\"(max-width: 1000px) 100vw, 1000px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-fdbefb3 elementor-widget elementor-widget-text-editor\" data-id=\"fdbefb3\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">DORA applies specifically to the following activities:<\/span><\/p><ul><li><span style=\"font-weight: 400;\">credit institutions;<\/span><\/li><li><span style=\"font-weight: 400;\">payment institutions;<\/span><\/li><li><span style=\"font-weight: 400;\">investment firms;<\/span><\/li><li><span style=\"font-weight: 400;\">providers of <a href=\"https:\/\/datascientest.com\/en\/cryptocurrency-trading-training-become-a-trading-expert-or-create-your-own-crypto\">crypto-asset related services<\/a>;<\/span><\/li><li><span style=\"font-weight: 400;\">insurance companies;<\/span><\/li><li><span style=\"font-weight: 400;\">third-party companies providing IT services for critical or important functions.<\/span><\/li><\/ul>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-db717d4 elementor-widget elementor-widget-text-editor\" data-id=\"db717d4\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">It should be noted that the regulation introduces a <\/span><b>principle of proportionality<\/b><span style=\"font-weight: 400;\">: some financial entities benefit from a simplified regime and may even be exempt from DORA. Various factors, including size, functions, or a company&#8217;s business profile, can expose it to varying scales of digital disruptions.<\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-f23c557 e-flex e-con-boxed e-con\" data-id=\"f23c557\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-0ab3359 elementor-widget elementor-widget-heading\" data-id=\"0ab3359\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">What Consequences for Financial Entities?<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-587f1bb elementor-widget elementor-widget-text-editor\" data-id=\"587f1bb\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">Most financial entities will need to implement changes to <\/span><b>comply with the DORA regulation<\/b><span style=\"font-weight: 400;\">. First, they must conduct an assessment of their current situation in relation to DORA&#8217;s expectations. They need to identify potential risks and also estimate acceptable disruption levels, especially from the users&#8217; perspective. After this assessment, an appropriate implementation of maturity is required.<\/span><\/p><p><span style=\"font-weight: 400;\">The company must establish intrusion testing, <\/span><b>backup and restoration policies<\/b><span style=\"font-weight: 400;\">. Once an incident occurs, it must be able to restore its systems and limit the overall impact. Subsequently, it needs to conduct a thorough review, determine causes, and implement appropriate remedies. Additionally, it must notify the competent authority of these incidents while following standardized reporting models.<\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-37543f4 elementor-widget elementor-widget-image\" data-id=\"37543f4\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"1000\" height=\"571\" src=\"https:\/\/datascientest.com\/en\/files\/2025\/01\/Regulation-DORA-DataScientest-3.webp\" class=\"attachment-full size-full wp-image-193105\" alt=\"\" srcset=\"https:\/\/datascientest.com\/en\/files\/2025\/01\/Regulation-DORA-DataScientest-3.webp 1000w, https:\/\/datascientest.com\/en\/files\/2025\/01\/Regulation-DORA-DataScientest-3-300x171.webp 300w, https:\/\/datascientest.com\/en\/files\/2025\/01\/Regulation-DORA-DataScientest-3-768x439.webp 768w\" sizes=\"(max-width: 1000px) 100vw, 1000px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-e1c7a66 e-flex e-con-boxed e-con\" data-id=\"e1c7a66\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-32b7be2 elementor-widget elementor-widget-heading\" data-id=\"32b7be2\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">An Opportunity Rather Than an Obligation<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6f51bbb elementor-widget elementor-widget-text-editor\" data-id=\"6f51bbb\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">DORA will typically involve an increase in <\/span><b>investments<\/b><span style=\"font-weight: 400;\"> and <\/span><b>IT resources<\/b><span style=\"font-weight: 400;\">. However, the European Union wants to convey that this new regulation is not just an obligation. DORA is part of companies&#8217; evolution towards <\/span><b>digitization<\/b><span style=\"font-weight: 400;\"> and aims to assist in the <\/span><b>transition of European financial markets to the digital age<\/b><span style=\"font-weight: 400;\">, to promote a robust market that users can trust.<\/span><\/p><p><span style=\"font-weight: 400;\">DORA starts from the premise that IT incidents, even if they seem unlikely at first glance, can occur and that it is necessary to be prepared to <\/span><b>ensure the continuity of critical activities and services<\/b><span style=\"font-weight: 400;\">. The financial company that adjusts its operations will benefit from optimized IT risk management.<\/span><\/p><p><span style=\"font-weight: 400;\">Therefore, this regulation should be seen as an opportunity to differentiate oneself in the market. Even small-sized companies can benefit from establishing robust policies and testing procedures. In France, <\/span><b>the AMF<\/b><span style=\"font-weight: 400;\"> has called on financial sector players to actively prepare for such a transformation.<\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-9f27da2 elementor-align-center button-principal elementor-widget elementor-widget-button\" data-id=\"9f27da2\" data-element_type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-button-wrapper\">\n\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-sm\" href=\"https:\/\/datascientest.com\/en\/data-courses\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t<span class=\"elementor-button-text\">Discover our courses<\/span>\n\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-9cd4b11 e-flex e-con-boxed e-con\" data-id=\"9cd4b11\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-009ade0 elementor-widget elementor-widget-html\" data-id=\"009ade0\" data-element_type=\"widget\" data-widget_type=\"html.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<script type=\"application\/ld+json\">\r\n{\r\n  \"@context\": \"https:\/\/schema.org\",\r\n  \"@type\": \"FAQPage\",\r\n  \"mainEntity\": [\r\n    {\r\n      \"@type\": \"Question\",\r\n      \"name\": \"What is the DORA regulation?\",\r\n      \"acceptedAnswer\": {\r\n        \"@type\": \"Answer\",\r\n        \"text\": \"The DORA regulation (Digital Operational Resilience Act) is a European law aimed at strengthening the digital operational resilience of financial institutions. It sets requirements for managing risks related to information and communication technologies.\"\r\n      }\r\n    },\r\n    {\r\n      \"@type\": \"Question\",\r\n      \"name\": \"Which companies are affected by DORA?\",\r\n      \"acceptedAnswer\": {\r\n        \"@type\": \"Answer\",\r\n        \"text\": \"DORA applies to financial institutions within the European Union, such as banks, insurance companies, asset managers, as well as third-party providers of critical IT services.\"\r\n      }\r\n    },\r\n    {\r\n      \"@type\": \"Question\",\r\n      \"name\": \"What are the objectives of the DORA regulation?\",\r\n      \"acceptedAnswer\": {\r\n        \"@type\": \"Answer\",\r\n        \"text\": \"The main objectives of DORA are to ensure the continuity of financial services during digital disruptions, standardize IT security requirements, and strengthen the supervision of third-party service providers.\"\r\n      }\r\n    },\r\n    {\r\n      \"@type\": \"Question\",\r\n      \"name\": \"When does the DORA regulation come into effect?\",\r\n      \"acceptedAnswer\": {\r\n        \"@type\": \"Answer\",\r\n        \"text\": \"The DORA regulation was adopted by the European Parliament in 2022 and will come into effect on January 17, 2025. Financial institutions must prepare for compliance by this date.\"\r\n      }\r\n    }\r\n  ]\r\n}\r\n<\/script>\r\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>The new DORA regulation is part of a European initiative aimed at enhancing the cybersecurity and operational resilience of companies engaged in financial activities. The European Union wants this initiative to be viewed more as an opportunity than a constraint. Resilience is a popular term these days. Amid challenges that some might face, it is [&hellip;]<\/p>\n","protected":false},"author":45,"featured_media":193104,"comment_status":"open","ping_status":"open","sticky":false,"template":"elementor_theme","format":"standard","meta":{"content-type":"","inline_featured_image":false},"categories":[2426],"tags":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v21.7 (Yoast SEO v21.7) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>What is the Digital Operational Resilience Act?<\/title>\n<meta name=\"description\" content=\"Understanding the main provisions of the DORA (Digital Operational Resilience Act) regulation and their impact on your company.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/datascientest.com\/en\/all-about-regulation-dora\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"What is the Digital Operational Resilience Act?\" \/>\n<meta property=\"og:description\" content=\"The new DORA regulation is part of a European initiative aimed at enhancing the cybersecurity and operational resilience of companies engaged in financial\" \/>\n<meta property=\"og:url\" content=\"https:\/\/datascientest.com\/en\/all-about-regulation-dora\" \/>\n<meta property=\"og:site_name\" content=\"DataScientest\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/DataScientestEN\" \/>\n<meta property=\"article:published_time\" content=\"2025-02-19T05:30:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-02-15T15:58:09+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/datascientest.com\/en\/files\/2025\/01\/Regulation-DORA-DataScientest.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"600\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/webp\" \/>\n<meta name=\"author\" content=\"Daniel\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@DataScientest__\" \/>\n<meta name=\"twitter:site\" content=\"@DataScientest__\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Daniel\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/datascientest.com\/en\/all-about-regulation-dora#article\",\"isPartOf\":{\"@id\":\"https:\/\/datascientest.com\/en\/all-about-regulation-dora\"},\"author\":{\"name\":\"Daniel\",\"@id\":\"https:\/\/datascientest.com\/en\/#\/schema\/person\/5a86e30c5090234fb43dd8baa83c44b0\"},\"headline\":\"What is the Digital Operational Resilience Act?\",\"datePublished\":\"2025-02-19T05:30:00+00:00\",\"dateModified\":\"2025-02-15T15:58:09+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/datascientest.com\/en\/all-about-regulation-dora\"},\"wordCount\":869,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/datascientest.com\/en\/#organization\"},\"articleSection\":[\"Cybersecurity\"],\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/datascientest.com\/en\/all-about-regulation-dora#respond\"]}],\"copyrightYear\":\"2025\",\"copyrightHolder\":{\"@id\":\"https:\/\/datascientest.com\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/datascientest.com\/en\/all-about-regulation-dora\",\"url\":\"https:\/\/datascientest.com\/en\/all-about-regulation-dora\",\"name\":\"What is the Digital Operational Resilience Act?\",\"isPartOf\":{\"@id\":\"https:\/\/datascientest.com\/en\/#website\"},\"datePublished\":\"2025-02-19T05:30:00+00:00\",\"dateModified\":\"2025-02-15T15:58:09+00:00\",\"description\":\"Understanding the main provisions of the DORA (Digital Operational Resilience Act) regulation and their impact on your company.\",\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/datascientest.com\/en\/all-about-regulation-dora\"]}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/datascientest.com\/en\/#website\",\"url\":\"https:\/\/datascientest.com\/en\/\",\"name\":\"DataScientest\",\"description\":\"Leader in Data Science Courses\",\"publisher\":{\"@id\":\"https:\/\/datascientest.com\/en\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/datascientest.com\/en\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/datascientest.com\/en\/#organization\",\"name\":\"DataScientest\",\"url\":\"https:\/\/datascientest.com\/en\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/datascientest.com\/en\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/datascientest.com\/en\/wp-content\/blogs.dir\/9\/files\/2024\/02\/DataScientest_icon_blue-2.png\",\"contentUrl\":\"https:\/\/datascientest.com\/en\/wp-content\/blogs.dir\/9\/files\/2024\/02\/DataScientest_icon_blue-2.png\",\"width\":301,\"height\":301,\"caption\":\"DataScientest\"},\"image\":{\"@id\":\"https:\/\/datascientest.com\/en\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/DataScientestEN\",\"https:\/\/twitter.com\/DataScientest__\",\"https:\/\/www.linkedin.com\/school\/datascientest\/mycompany\/\",\"https:\/\/www.tiktok.com\/@datascientest\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/datascientest.com\/en\/#\/schema\/person\/5a86e30c5090234fb43dd8baa83c44b0\",\"name\":\"Daniel\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/datascientest.com\/en\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/837acad4f2dc47e85d81cce837261670?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/837acad4f2dc47e85d81cce837261670?s=96&d=mm&r=g\",\"caption\":\"Daniel\"},\"sameAs\":[\"https:\/\/www.linkedin.com\/school\/datascientest\/\",\"user\"],\"jobTitle\":\"ing\u00e9nieur logiciel\",\"worksFor\":\"DataScientest\",\"url\":\"https:\/\/datascientest.com\/en\/author\/team-redac\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"What is the Digital Operational Resilience Act?","description":"Understanding the main provisions of the DORA (Digital Operational Resilience Act) regulation and their impact on your company.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/datascientest.com\/en\/all-about-regulation-dora","og_locale":"en_GB","og_type":"article","og_title":"What is the Digital Operational Resilience Act?","og_description":"The new DORA regulation is part of a European initiative aimed at enhancing the cybersecurity and operational resilience of companies engaged in financial","og_url":"https:\/\/datascientest.com\/en\/all-about-regulation-dora","og_site_name":"DataScientest","article_publisher":"https:\/\/www.facebook.com\/DataScientestEN","article_published_time":"2025-02-19T05:30:00+00:00","article_modified_time":"2025-02-15T15:58:09+00:00","og_image":[{"width":1200,"height":600,"url":"https:\/\/datascientest.com\/en\/files\/2025\/01\/Regulation-DORA-DataScientest.webp","type":"image\/webp"}],"author":"Daniel","twitter_card":"summary_large_image","twitter_creator":"@DataScientest__","twitter_site":"@DataScientest__","twitter_misc":{"Written by":"Daniel","Estimated reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/datascientest.com\/en\/all-about-regulation-dora#article","isPartOf":{"@id":"https:\/\/datascientest.com\/en\/all-about-regulation-dora"},"author":{"name":"Daniel","@id":"https:\/\/datascientest.com\/en\/#\/schema\/person\/5a86e30c5090234fb43dd8baa83c44b0"},"headline":"What is the Digital Operational Resilience Act?","datePublished":"2025-02-19T05:30:00+00:00","dateModified":"2025-02-15T15:58:09+00:00","mainEntityOfPage":{"@id":"https:\/\/datascientest.com\/en\/all-about-regulation-dora"},"wordCount":869,"commentCount":0,"publisher":{"@id":"https:\/\/datascientest.com\/en\/#organization"},"articleSection":["Cybersecurity"],"inLanguage":"en-GB","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/datascientest.com\/en\/all-about-regulation-dora#respond"]}],"copyrightYear":"2025","copyrightHolder":{"@id":"https:\/\/datascientest.com\/#organization"}},{"@type":"WebPage","@id":"https:\/\/datascientest.com\/en\/all-about-regulation-dora","url":"https:\/\/datascientest.com\/en\/all-about-regulation-dora","name":"What is the Digital Operational Resilience Act?","isPartOf":{"@id":"https:\/\/datascientest.com\/en\/#website"},"datePublished":"2025-02-19T05:30:00+00:00","dateModified":"2025-02-15T15:58:09+00:00","description":"Understanding the main provisions of the DORA (Digital Operational Resilience Act) regulation and their impact on your company.","inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/datascientest.com\/en\/all-about-regulation-dora"]}]},{"@type":"WebSite","@id":"https:\/\/datascientest.com\/en\/#website","url":"https:\/\/datascientest.com\/en\/","name":"DataScientest","description":"Leader in Data Science Courses","publisher":{"@id":"https:\/\/datascientest.com\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/datascientest.com\/en\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-GB"},{"@type":"Organization","@id":"https:\/\/datascientest.com\/en\/#organization","name":"DataScientest","url":"https:\/\/datascientest.com\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/datascientest.com\/en\/#\/schema\/logo\/image\/","url":"https:\/\/datascientest.com\/en\/wp-content\/blogs.dir\/9\/files\/2024\/02\/DataScientest_icon_blue-2.png","contentUrl":"https:\/\/datascientest.com\/en\/wp-content\/blogs.dir\/9\/files\/2024\/02\/DataScientest_icon_blue-2.png","width":301,"height":301,"caption":"DataScientest"},"image":{"@id":"https:\/\/datascientest.com\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/DataScientestEN","https:\/\/twitter.com\/DataScientest__","https:\/\/www.linkedin.com\/school\/datascientest\/mycompany\/","https:\/\/www.tiktok.com\/@datascientest"]},{"@type":"Person","@id":"https:\/\/datascientest.com\/en\/#\/schema\/person\/5a86e30c5090234fb43dd8baa83c44b0","name":"Daniel","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/datascientest.com\/en\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/837acad4f2dc47e85d81cce837261670?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/837acad4f2dc47e85d81cce837261670?s=96&d=mm&r=g","caption":"Daniel"},"sameAs":["https:\/\/www.linkedin.com\/school\/datascientest\/","user"],"jobTitle":"ing\u00e9nieur logiciel","worksFor":"DataScientest","url":"https:\/\/datascientest.com\/en\/author\/team-redac"}]}},"_links":{"self":[{"href":"https:\/\/datascientest.com\/en\/wp-json\/wp\/v2\/posts\/193102"}],"collection":[{"href":"https:\/\/datascientest.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/datascientest.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/datascientest.com\/en\/wp-json\/wp\/v2\/users\/45"}],"replies":[{"embeddable":true,"href":"https:\/\/datascientest.com\/en\/wp-json\/wp\/v2\/comments?post=193102"}],"version-history":[{"count":34,"href":"https:\/\/datascientest.com\/en\/wp-json\/wp\/v2\/posts\/193102\/revisions"}],"predecessor-version":[{"id":193704,"href":"https:\/\/datascientest.com\/en\/wp-json\/wp\/v2\/posts\/193102\/revisions\/193704"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/datascientest.com\/en\/wp-json\/wp\/v2\/media\/193104"}],"wp:attachment":[{"href":"https:\/\/datascientest.com\/en\/wp-json\/wp\/v2\/media?parent=193102"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/datascientest.com\/en\/wp-json\/wp\/v2\/categories?post=193102"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/datascientest.com\/en\/wp-json\/wp\/v2\/tags?post=193102"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}