{"id":260042,"date":"2025-01-20T06:30:00","date_gmt":"2025-01-20T06:30:00","guid":{"rendered":"https:\/\/datascientest.com\/?p=260042"},"modified":"2025-01-17T15:44:18","modified_gmt":"2025-01-17T15:44:18","slug":"reglementation-dora-tout-savoir","status":"publish","type":"post","link":"https:\/\/datascientest.com\/reglementation-dora-tout-savoir","title":{"rendered":"R\u00e9glementation DORA (Digital Operational Resilience Act) : tout ce qu&rsquo;il faut savoir"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"260042\" class=\"elementor elementor-260042\" data-elementor-post-type=\"post\">\n\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-5106a2c e-flex e-con-boxed e-con\" data-id=\"5106a2c\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-5a38020 elementor-widget elementor-widget-text-editor\" data-id=\"5a38020\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.15.0 - 02-08-2023 *\/\n.elementor-widget-text-editor.elementor-drop-cap-view-stacked .elementor-drop-cap{background-color:#69727d;color:#fff}.elementor-widget-text-editor.elementor-drop-cap-view-framed .elementor-drop-cap{color:#69727d;border:3px solid;background-color:transparent}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap{margin-top:8px}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap-letter{width:1em;height:1em}.elementor-widget-text-editor .elementor-drop-cap{float:left;text-align:center;line-height:1;font-size:50px}.elementor-widget-text-editor .elementor-drop-cap-letter{display:inline-block}<\/style>\t\t\t\t<p><strong>La nouvelle r\u00e9glementation DORA s\u2019inscrit dans une dynamique europ\u00e9enne visant \u00e0 renforcer la cybers\u00e9curit\u00e9 et la r\u00e9silience op\u00e9rationnelle des entreprises ayant une activit\u00e9 li\u00e9e \u00e0 la finance. L\u2019Union Europ\u00e9enne voudrait que cette initiative soit per\u00e7ue comme une opportunit\u00e9 davantage que comme une contrainte.<\/strong><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3fc58d2 elementor-widget elementor-widget-text-editor\" data-id=\"3fc58d2\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">La <strong>r\u00e9silience<\/strong> est un mot dans l\u2019air du temps. Face aux difficult\u00e9s que certains peuvent rencontrer, il est de bon ton d\u2019\u00eatre r\u00e9silient, en d\u2019autres termes de pouvoir absorber l\u2019impact de la perturbation et se r\u00e9tablir rapidement.<\/span><\/p><p><span style=\"font-weight: 400;\">Quid des entreprises ? Ne serait-il pas important qu\u2019elles puissent faire preuve de r\u00e9silience en cas de dysfonctionnement temporaire de leur informatique ou m\u00eame de cyberattaque ?<\/span><\/p><p><span style=\"font-weight: 400;\">On en conviendra, cette capacit\u00e9 \u00e0 la r\u00e9silience appara\u00eet plus cruciale encore lorsque l\u2019informatique en question est celle d\u2019une banque ou d\u2019un <a href=\"https:\/\/datascientest.com\/en-savoir-plus-sur-les-cryptomonnaies\">fournisseur de cryptomonnaies<\/a>. L\u2019incapacit\u00e9 d\u2019acc\u00e9der \u00e0 ses avoirs en <strong>euros<\/strong> comme en <strong>bitcoin<\/strong> ou en <strong>ethereum<\/strong> peut \u00eatre une source d\u2019inqui\u00e9tude patente.<\/span><\/p><p><span style=\"font-weight: 400;\">Face \u00e0 ces d\u00e9fis, l\u2019Union Europ\u00e9enne a mis en place DORA, (Digital Operational Resilience ou r\u00e9silience op\u00e9rationnelle num\u00e9rique) un r\u00e8glement qui vise pr\u00e9cis\u00e9ment \u00e0 garantir <strong>la continuit\u00e9 et la s\u00e9curit\u00e9 des activit\u00e9s financi\u00e8res<\/strong>.<\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-34adfd8 elementor-align-center button-principale elementor-widget elementor-widget-button\" data-id=\"34adfd8\" data-element_type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-button-wrapper\">\n\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-sm elementor-animation-grow\" href=\"https:\/\/datascientest.com\/formations-cybersecurite\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t<span class=\"elementor-button-text\">Se former sur le r\u00e9glementation DORA<\/span>\n\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-85940f8 e-flex e-con-boxed e-con\" data-id=\"85940f8\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-c3d0866 elementor-widget elementor-widget-heading\" data-id=\"c3d0866\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.15.0 - 02-08-2023 *\/\n.elementor-heading-title{padding:0;margin:0;line-height:1}.elementor-widget-heading .elementor-heading-title[class*=elementor-size-]>a{color:inherit;font-size:inherit;line-height:inherit}.elementor-widget-heading .elementor-heading-title.elementor-size-small{font-size:15px}.elementor-widget-heading .elementor-heading-title.elementor-size-medium{font-size:19px}.elementor-widget-heading .elementor-heading-title.elementor-size-large{font-size:29px}.elementor-widget-heading .elementor-heading-title.elementor-size-xl{font-size:39px}.elementor-widget-heading .elementor-heading-title.elementor-size-xxl{font-size:59px}<\/style><h3 class=\"elementor-heading-title elementor-size-default\">Naissance de DORA<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-2f72b0e elementor-widget elementor-widget-text-editor\" data-id=\"2f72b0e\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">C\u2019est \u00e0 la fin du mois de septembre 2020 que la Commission Europ\u00e9enne a publi\u00e9 le projet <strong>Digital Operational Resilience<\/strong> soit une s\u00e9rie de mesures visant \u00e0 accro\u00eetre l\u2019efficacit\u00e9 num\u00e9rique du secteur financier.<\/span><\/p><p><span style=\"font-weight: 400;\">L\u2019objectif \u00e9tait d\u2019unifier les normes et exigences europ\u00e9ennes en vue de <strong>cr\u00e9er un cadre harmonis\u00e9 et complet relatif \u00e0 la r\u00e9silience op\u00e9rationnelle num\u00e9rique des entit\u00e9s financi\u00e8res<\/strong>. DORA entend favoriser une d\u00e9tection rapide des incidents informatiques majeurs, une capacit\u00e9 \u00e0 rebondir rapidement et aussi une analyse des causes de perturbation, assorties d\u2019une obligation de d\u00e9claration.<\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-0f4169e e-flex e-con-boxed e-con\" data-id=\"0f4169e\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-54a9800 elementor-widget elementor-widget-heading\" data-id=\"54a9800\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Des cyberattaques aux cons\u00e9quences majeures<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-48084fc elementor-widget elementor-widget-image\" data-id=\"48084fc\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.15.0 - 02-08-2023 *\/\n.elementor-widget-image{text-align:center}.elementor-widget-image a{display:inline-block}.elementor-widget-image a img[src$=\".svg\"]{width:48px}.elementor-widget-image img{vertical-align:middle;display:inline-block}<\/style>\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"1000\" height=\"571\" src=\"https:\/\/datascientest.com\/wp-content\/uploads\/2024\/12\/Reglementation-DORA-DataScientest-1.webp\" class=\"attachment-full size-full wp-image-260054\" alt=\"\" loading=\"lazy\" srcset=\"https:\/\/datascientest.com\/wp-content\/uploads\/2024\/12\/Reglementation-DORA-DataScientest-1.webp 1000w, https:\/\/datascientest.com\/wp-content\/uploads\/2024\/12\/Reglementation-DORA-DataScientest-1-300x171.webp 300w, https:\/\/datascientest.com\/wp-content\/uploads\/2024\/12\/Reglementation-DORA-DataScientest-1-768x439.webp 768w\" sizes=\"(max-width: 1000px) 100vw, 1000px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-96488b8 elementor-widget elementor-widget-text-editor\" data-id=\"96488b8\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">Ce cadre r\u00e9glementaire a \u00e9t\u00e9 rendu n\u00e9cessaire par la mont\u00e9e des risques pos\u00e9s par <strong>la transformation num\u00e9rique des services financiers<\/strong>, mais aussi par l\u2019interconnexion croissante des r\u00e9seaux.\u00a0 Il s\u2019est trouv\u00e9 que de nombreuses cyberattaques ont eu des cons\u00e9quences \u00e9normes pour des \u00e9tablissements de renom.<\/span><\/p><ul><li><span style=\"font-weight: 400;\">En 2014, JP Morgan Chase, l\u2019une des plus grandes banques des USA a subi une intrusion aboutissant \u00e0 la compromission de plus de 80 millions d\u2019identit\u00e9s.<\/span><\/li><li><span style=\"font-weight: 400;\">Deux ans plus tard, le piratage du syst\u00e8me de messagerie interbancaire SWIFT a permis le d\u00e9tournement de <\/span><span style=\"font-weight: 400;\">81 millions de dollars de la banque centrale du Bangladesh.<\/span><\/li><li><span style=\"font-weight: 400;\">Durant la m\u00eame ann\u00e9e 2016, Tesco Bank, un \u00e9tablissement britannique a \u00e9t\u00e9 victime d\u2019une cyberattaque qui a impact\u00e9 9 000 comptes clients et permis aux pirates de d\u00e9rober environ 2,5 millions de livres sterling.<\/span><\/li><li><span style=\"font-weight: 400;\">En 2017, 140 millions de dossiers de Equifax, l\u2019une des principales agences de cr\u00e9dit am\u00e9ricaines, ont \u00e9t\u00e9 pirat\u00e9s, donnant acc\u00e8s aux num\u00e9ros de s\u00e9curit\u00e9 sociale, dates de naissance et autres donn\u00e9es personnelles.<\/span><\/li><li><span style=\"font-weight: 400;\">En 2019, une violation de s\u00e9curit\u00e9 du syst\u00e8me de la banque am\u00e9ricaine Capital One a entra\u00een\u00e9 l\u2019acc\u00e8s aux donn\u00e9es personnelles d\u2019environ 100 millions de clients et demandeurs de cartes de cr\u00e9dit.<\/span><\/li><\/ul>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6f6f1e9 elementor-align-center button-principale elementor-widget elementor-widget-button\" data-id=\"6f6f1e9\" data-element_type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-button-wrapper\">\n\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-sm elementor-animation-grow\" href=\"https:\/\/datascientest.com\/formations-cybersecurite\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t<span class=\"elementor-button-text\">Apprendre \u00e0 identifier des menaces cyber<\/span>\n\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-cb0ca44 elementor-widget elementor-widget-text-editor\" data-id=\"cb0ca44\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">La plupart de ces entreprises ont eu \u00e0 p\u00e2tir des retomb\u00e9es de telles <a href=\"https:\/\/datascientest.com\/cyberattaque-tout-savoir\">cyberattaques<\/a> sur leur image, la confiance de leur public a souvent \u00e9t\u00e9 impact\u00e9e n\u00e9gativement faute d\u2019une reprise en main rapide.\u00a0<\/span><\/p><p><span style=\"font-weight: 400;\">On en conviendra, ce type d\u2019incident ne pouvait que plaider en faveur de la <strong>mise en place de r\u00e8gles<\/strong> visant \u00e0 garantir la s\u00e9curit\u00e9 et la continuit\u00e9 des op\u00e9rations financi\u00e8res.<\/span><\/p><p><span style=\"font-weight: 400;\">Le r\u00e8glement DORA a \u00e9t\u00e9 adopt\u00e9 par le Parlement Europ\u00e9en le 10 novembre 2022 puis par le Conseil de l\u2019UE et publi\u00e9 dans la foul\u00e9e au Journal Officiel.<\/span><\/p><p><span style=\"font-weight: 400;\">Depuis le 17 janvier 2025, DORA est en application dans tous les \u00c9tats membres de l&rsquo;UE.<\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-c61d7c9 e-flex e-con-boxed e-con\" data-id=\"c61d7c9\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-436bd0b elementor-widget elementor-widget-heading\" data-id=\"436bd0b\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Qui est concern\u00e9 par DORA ?<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4da2a7a elementor-widget elementor-widget-image\" data-id=\"4da2a7a\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"1000\" height=\"571\" src=\"https:\/\/datascientest.com\/wp-content\/uploads\/2024\/12\/Reglementation-DORA-DataScientest-2.webp\" class=\"attachment-full size-full wp-image-260058\" alt=\"\" loading=\"lazy\" srcset=\"https:\/\/datascientest.com\/wp-content\/uploads\/2024\/12\/Reglementation-DORA-DataScientest-2.webp 1000w, https:\/\/datascientest.com\/wp-content\/uploads\/2024\/12\/Reglementation-DORA-DataScientest-2-300x171.webp 300w, https:\/\/datascientest.com\/wp-content\/uploads\/2024\/12\/Reglementation-DORA-DataScientest-2-768x439.webp 768w\" sizes=\"(max-width: 1000px) 100vw, 1000px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4891d4c elementor-widget elementor-widget-text-editor\" data-id=\"4891d4c\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">DORA s&rsquo;applique notamment aux activit\u00e9s suivantes :<\/span><\/p><ul><li><span style=\"font-weight: 400;\">soci\u00e9t\u00e9s de cr\u00e9dit ;<\/span><\/li><li><span style=\"font-weight: 400;\">\u00e9tablissements de paiement ;<\/span><\/li><li><span style=\"font-weight: 400;\">soci\u00e9t\u00e9s d\u2019investissement ;<\/span><\/li><li><span style=\"font-weight: 400;\">prestataires de <a href=\"https:\/\/datascientest.com\/formation-cryptomonnaie\">services li\u00e9s aux crypto-actifs<\/a> ;<\/span><\/li><li><span style=\"font-weight: 400;\">entreprises d&rsquo;assurance ;<\/span><\/li><li><span style=\"font-weight: 400;\">entreprises tierces fournissant des services informatiques sur des fonctions critiques ou importantes.<\/span><\/li><\/ul>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b7448ae elementor-widget elementor-widget-text-editor\" data-id=\"b7448ae\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">Il est \u00e0 noter que le r\u00e8glement introduit un <strong>principe de proportionnalit\u00e9<\/strong> : certaines entit\u00e9s financi\u00e8res b\u00e9n\u00e9ficient d\u2019un r\u00e9gime simplifi\u00e9, et peuvent m\u00eame se voir exempt\u00e9es de DORA. Il se trouve que divers facteurs notamment la taille mais aussi les fonctions ou le profil commercial d\u2019une soci\u00e9t\u00e9 peuvent l\u2019exposer \u00e0 une \u00e9chelle plus ou moins \u00e9lev\u00e9e de perturbations num\u00e9riques.<\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-86db267 elementor-align-center button-principale elementor-widget elementor-widget-button\" data-id=\"86db267\" data-element_type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-button-wrapper\">\n\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-sm elementor-animation-grow\" href=\"https:\/\/datascientest.com\/formations-cybersecurite\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t<span class=\"elementor-button-text\">Se former en cybers\u00e9curit\u00e9<\/span>\n\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-f34d8b7 e-flex e-con-boxed e-con\" data-id=\"f34d8b7\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-068702e elementor-widget elementor-widget-heading\" data-id=\"068702e\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Quelles cons\u00e9quences pour les entit\u00e9s financi\u00e8res ?<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0e33a32 elementor-widget elementor-widget-text-editor\" data-id=\"0e33a32\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">La plupart des entit\u00e9s financi\u00e8res vont devoir proc\u00e9der \u00e0 des changements en vue de <strong>se conformer \u00e0 la r\u00e9glementation DORA<\/strong>. En premier lieu, elles doivent proc\u00e9der \u00e0 une \u00e9valuation de leur situation pr\u00e9sente vis-\u00e0-vis des attentes de DORA. Il s\u2019agit pour elles d\u2019identifier les risques potentiels et aussi d\u2019estimer les niveaux de perturbations acceptables notamment du point de vue des usagers. Une fois cette \u00e9valuation op\u00e9r\u00e9e, elles auront \u00e0 mettre en \u0153uvre une maturation ad\u00e9quate.\u00a0<\/span><\/p><p><span style=\"font-weight: 400;\">L\u2019entreprise doit \u00e9tablir des <a href=\"https:\/\/datascientest.com\/formation-pentester\">tests d\u2019intrusion<\/a>, des <strong>politiques de sauvegarde et restauration<\/strong>. Une fois qu\u2019un incident s\u2019est produit, elle doit \u00eatre \u00e0 m\u00eame d\u2019assurer le r\u00e9tablissement de ses syst\u00e8mes et de limiter l\u2019impact global. Il lui faut ensuite r\u00e9aliser un examen approfondi, d\u00e9terminer les causes et mettre en place les rem\u00e8des ad\u00e9quats. Il lui faudra, de plus, notifier l\u2019autorit\u00e9 comp\u00e9tente de ces incidents tout en suivant des mod\u00e8les de reporting normalis\u00e9s.<\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d4ca52e elementor-widget elementor-widget-image\" data-id=\"d4ca52e\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"1000\" height=\"571\" src=\"https:\/\/datascientest.com\/wp-content\/uploads\/2024\/12\/Reglementation-DORA-DataScientest-3.webp\" class=\"attachment-full size-full wp-image-260062\" alt=\"\" loading=\"lazy\" srcset=\"https:\/\/datascientest.com\/wp-content\/uploads\/2024\/12\/Reglementation-DORA-DataScientest-3.webp 1000w, https:\/\/datascientest.com\/wp-content\/uploads\/2024\/12\/Reglementation-DORA-DataScientest-3-300x171.webp 300w, https:\/\/datascientest.com\/wp-content\/uploads\/2024\/12\/Reglementation-DORA-DataScientest-3-768x439.webp 768w\" sizes=\"(max-width: 1000px) 100vw, 1000px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-be0ca20 e-flex e-con-boxed e-con\" data-id=\"be0ca20\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-5196475 elementor-widget elementor-widget-heading\" data-id=\"5196475\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Une opportunit\u00e9 davantage qu\u2019une obligation<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0431ba9 elementor-widget elementor-widget-text-editor\" data-id=\"0431ba9\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">DORA va habituellement impliquer une augmentation des <strong>investissements<\/strong> et <strong>ressources informatiques<\/strong>. Pourtant, l\u2019Union Europ\u00e9enne voudrait faire passer le message que cette nouvelle r\u00e9glementation n\u2019est pas juste une obligation. DORA participe de l\u2019\u00e9volution des entreprises vers la <strong>num\u00e9risation<\/strong> et entend aider \u00e0 la <strong>transition des march\u00e9s financiers europ\u00e9ens \u00e0 l\u2019\u00e8re num\u00e9rique<\/strong>, en vue de promouvoir un march\u00e9 solide envers lequel les usagers puissent se sentir en confiance.<\/span><\/p><p><span style=\"font-weight: 400;\">DORA part du principe que des incidents informatiques, m\u00eame s\u2019ils paraissent peu probables au premier abord, sont en mesure de se produire et qu\u2019il faut \u00eatre pr\u00e9par\u00e9 \u00e0 <strong>assurer la continuit\u00e9 des activit\u00e9s et services critiques<\/strong>. L\u2019entreprise financi\u00e8re qui ajuste son fonctionnement va b\u00e9n\u00e9ficier d\u2019une gestion optimis\u00e9e du risque informatique.\u00a0<\/span><\/p><p><span style=\"font-weight: 400;\">Cette r\u00e9glementation doit donc \u00eatre consid\u00e9r\u00e9e comme une opportunit\u00e9 de se diff\u00e9rencier sur son\u00a0 march\u00e9. M\u00eame les entreprises de taille modeste peuvent gagner \u00e0 se doter de politiques robustes et de proc\u00e9dures de test. En France, <strong>l\u2019AMF<\/strong> a d\u2019ailleurs appel\u00e9 les acteurs du secteur financier \u00e0 se pr\u00e9parer activement \u00e0 une telle mutation.<\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-65ffc58 elementor-align-center button-principale elementor-widget elementor-widget-button\" data-id=\"65ffc58\" data-element_type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-button-wrapper\">\n\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-sm elementor-animation-grow\" href=\"https:\/\/datascientest.com\/formations-cybersecurite\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t<span class=\"elementor-button-text\">D\u00e9couvrir nos formations en cybers\u00e9curit\u00e9<\/span>\n\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-2b6c94b e-flex e-con-boxed e-con\" data-id=\"2b6c94b\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-c51b78d elementor-widget elementor-widget-html\" data-id=\"c51b78d\" data-element_type=\"widget\" data-widget_type=\"html.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<script type=\"application\/ld+json\">\r\n{\r\n  \"@context\": \"https:\/\/schema.org\",\r\n  \"@type\": \"FAQPage\",\r\n  \"mainEntity\": [\r\n    {\r\n      \"@type\": \"Question\",\r\n      \"name\": \"Qu'est-ce que la r\u00e8glementation DORA ?\",\r\n      \"acceptedAnswer\": {\r\n        \"@type\": \"Answer\",\r\n        \"text\": \"La r\u00e8glementation DORA (Digital Operational Resilience Act) est une l\u00e9gislation europ\u00e9enne qui vise \u00e0 renforcer la r\u00e9silience op\u00e9rationnelle num\u00e9rique des institutions financi\u00e8res. Elle impose des exigences en mati\u00e8re de gestion des risques li\u00e9s aux technologies de l'information et de la communication.\"\r\n      }\r\n    },\r\n    {\r\n      \"@type\": \"Question\",\r\n      \"name\": \"Quelles entreprises sont concern\u00e9es par DORA ?\",\r\n      \"acceptedAnswer\": {\r\n        \"@type\": \"Answer\",\r\n        \"text\": \"DORA s'applique aux institutions financi\u00e8res de l'Union europ\u00e9enne, comme les banques, les assurances, les gestionnaires d'actifs, ainsi qu'aux fournisseurs tiers de services informatiques critiques.\"\r\n      }\r\n    },\r\n    {\r\n      \"@type\": \"Question\",\r\n      \"name\": \"Quels sont les objectifs de la r\u00e8glementation DORA ?\",\r\n      \"acceptedAnswer\": {\r\n        \"@type\": \"Answer\",\r\n        \"text\": \"Les principaux objectifs de DORA sont de garantir la continuit\u00e9 des services financiers en cas de perturbations num\u00e9riques, de standardiser les exigences de s\u00e9curit\u00e9 informatique et de renforcer la supervision des prestataires de services tiers.\"\r\n      }\r\n    },\r\n    {\r\n      \"@type\": \"Question\",\r\n      \"name\": \"Quand la r\u00e8glementation DORA entre-t-elle en vigueur ?\",\r\n      \"acceptedAnswer\": {\r\n        \"@type\": \"Answer\",\r\n        \"text\": \"La r\u00e8glementation DORA a \u00e9t\u00e9 adopt\u00e9e par le Parlement europ\u00e9en en 2022 et entrera en application \u00e0 partir du 17 janvier 2025. Les institutions financi\u00e8res doivent se pr\u00e9parer d'ici cette date pour \u00eatre conformes.\"\r\n      }\r\n    }\r\n  ]\r\n}\r\n<\/script>\r\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>La nouvelle r\u00e9glementation DORA s\u2019inscrit dans une dynamique europ\u00e9enne visant \u00e0 renforcer la cybers\u00e9curit\u00e9 et la r\u00e9silience op\u00e9rationnelle des entreprises ayant une activit\u00e9 li\u00e9e \u00e0 la finance. L\u2019Union Europ\u00e9enne voudrait que cette initiative soit per\u00e7ue comme une opportunit\u00e9 davantage que comme une contrainte. La r\u00e9silience est un mot dans l\u2019air du temps. Face aux difficult\u00e9s [&hellip;]<\/p>\n","protected":false},"author":83,"featured_media":260044,"comment_status":"open","ping_status":"open","sticky":false,"template":"elementor_theme","format":"standard","meta":{"content-type":"","inline_featured_image":false},"categories":[2498],"tags":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v21.7 (Yoast SEO v21.7) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>R\u00e9glementation DORA (Digital Operational Resilience Act) : tout ce qu&#039;il faut savoir<\/title>\n<meta name=\"description\" content=\"Comprendre les principales dispositions de la r\u00e9glementation DORA (Digital Operational Resilience Act) et leur impact sur votre entreprise.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/datascientest.com\/reglementation-dora-tout-savoir\" \/>\n<meta property=\"og:locale\" content=\"fr_FR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"R\u00e9glementation DORA (Digital Operational Resilience Act) : tout ce qu&#039;il faut savoir\" \/>\n<meta property=\"og:url\" content=\"https:\/\/datascientest.com\/reglementation-dora-tout-savoir\" \/>\n<meta property=\"og:site_name\" content=\"Formation Data Science | DataScientest.com\" \/>\n<meta property=\"article:published_time\" content=\"2025-01-20T06:30:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-01-17T15:44:18+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/datascientest.com\/wp-content\/uploads\/2024\/12\/Reglementation-DORA-DataScientest.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"600\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/webp\" \/>\n<meta name=\"author\" content=\"Ruben Guez\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u00c9crit par\" \/>\n\t<meta name=\"twitter:data1\" content=\"Ruben Guez\" \/>\n\t<meta name=\"twitter:label2\" content=\"Dur\u00e9e de lecture estim\u00e9e\" \/>\n\t<meta name=\"twitter:data2\" content=\"7 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/datascientest.com\/reglementation-dora-tout-savoir\",\"url\":\"https:\/\/datascientest.com\/reglementation-dora-tout-savoir\",\"name\":\"R\u00e9glementation DORA (Digital Operational Resilience Act) : tout ce qu'il faut savoir\",\"isPartOf\":{\"@id\":\"https:\/\/datascientest.com\/#website\"},\"datePublished\":\"2025-01-20T06:30:00+00:00\",\"dateModified\":\"2025-01-17T15:44:18+00:00\",\"author\":{\"@id\":\"https:\/\/datascientest.com\/#\/schema\/person\/0d11a61dd2bf6824c31dd59bbd7253b0\"},\"description\":\"Comprendre les principales dispositions de la r\u00e9glementation DORA (Digital Operational Resilience Act) et leur impact sur votre entreprise.\",\"inLanguage\":\"fr-FR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/datascientest.com\/reglementation-dora-tout-savoir\"]}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/datascientest.com\/#website\",\"url\":\"https:\/\/datascientest.com\/\",\"name\":\"Formation Data Science | DataScientest.com\",\"description\":\"Leader de la formation en Data Science\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/datascientest.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"fr-FR\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/datascientest.com\/#\/schema\/person\/0d11a61dd2bf6824c31dd59bbd7253b0\",\"name\":\"Ruben Guez\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\/\/datascientest.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/datascientest.com\/wp-content\/uploads\/2024\/10\/1631145283649.jpeg\",\"contentUrl\":\"https:\/\/datascientest.com\/wp-content\/uploads\/2024\/10\/1631145283649.jpeg\",\"caption\":\"Ruben Guez\"},\"description\":\"Ruben Guez est Head of Sales chez DataScientest, o\u00f9 il pilote le d\u00e9veloppement commercial des formations en data science et cybers\u00e9curit\u00e9, en accompagnant les entreprises dans leur transformation digitale. Avant cela, il a occup\u00e9 des postes en consulting RH chez Chanel et en d\u00e9veloppement commercial chez SwingSwiss, renfor\u00e7ant son expertise en gestion de projet et analyse des donn\u00e9es.\",\"sameAs\":[\"https:\/\/www.linkedin.com\/in\/ruben-guez\/\",\"Head of Sales Cyber\"],\"url\":\"https:\/\/datascientest.com\/author\/sacha\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"R\u00e9glementation DORA (Digital Operational Resilience Act) : tout ce qu'il faut savoir","description":"Comprendre les principales dispositions de la r\u00e9glementation DORA (Digital Operational Resilience Act) et leur impact sur votre entreprise.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/datascientest.com\/reglementation-dora-tout-savoir","og_locale":"fr_FR","og_type":"article","og_title":"R\u00e9glementation DORA (Digital Operational Resilience Act) : tout ce qu'il faut savoir","og_url":"https:\/\/datascientest.com\/reglementation-dora-tout-savoir","og_site_name":"Formation Data Science | DataScientest.com","article_published_time":"2025-01-20T06:30:00+00:00","article_modified_time":"2025-01-17T15:44:18+00:00","og_image":[{"width":1200,"height":600,"url":"https:\/\/datascientest.com\/wp-content\/uploads\/2024\/12\/Reglementation-DORA-DataScientest.webp","type":"image\/webp"}],"author":"Ruben Guez","twitter_card":"summary_large_image","twitter_misc":{"\u00c9crit par":"Ruben Guez","Dur\u00e9e de lecture estim\u00e9e":"7 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/datascientest.com\/reglementation-dora-tout-savoir","url":"https:\/\/datascientest.com\/reglementation-dora-tout-savoir","name":"R\u00e9glementation DORA (Digital Operational Resilience Act) : tout ce qu'il faut savoir","isPartOf":{"@id":"https:\/\/datascientest.com\/#website"},"datePublished":"2025-01-20T06:30:00+00:00","dateModified":"2025-01-17T15:44:18+00:00","author":{"@id":"https:\/\/datascientest.com\/#\/schema\/person\/0d11a61dd2bf6824c31dd59bbd7253b0"},"description":"Comprendre les principales dispositions de la r\u00e9glementation DORA (Digital Operational Resilience Act) et leur impact sur votre entreprise.","inLanguage":"fr-FR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/datascientest.com\/reglementation-dora-tout-savoir"]}]},{"@type":"WebSite","@id":"https:\/\/datascientest.com\/#website","url":"https:\/\/datascientest.com\/","name":"Formation Data Science | DataScientest.com","description":"Leader de la formation en Data Science","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/datascientest.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"fr-FR"},{"@type":"Person","@id":"https:\/\/datascientest.com\/#\/schema\/person\/0d11a61dd2bf6824c31dd59bbd7253b0","name":"Ruben Guez","image":{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/datascientest.com\/#\/schema\/person\/image\/","url":"https:\/\/datascientest.com\/wp-content\/uploads\/2024\/10\/1631145283649.jpeg","contentUrl":"https:\/\/datascientest.com\/wp-content\/uploads\/2024\/10\/1631145283649.jpeg","caption":"Ruben Guez"},"description":"Ruben Guez est Head of Sales chez DataScientest, o\u00f9 il pilote le d\u00e9veloppement commercial des formations en data science et cybers\u00e9curit\u00e9, en accompagnant les entreprises dans leur transformation digitale. Avant cela, il a occup\u00e9 des postes en consulting RH chez Chanel et en d\u00e9veloppement commercial chez SwingSwiss, renfor\u00e7ant son expertise en gestion de projet et analyse des donn\u00e9es.","sameAs":["https:\/\/www.linkedin.com\/in\/ruben-guez\/","Head of Sales Cyber"],"url":"https:\/\/datascientest.com\/author\/sacha"}]}},"_links":{"self":[{"href":"https:\/\/datascientest.com\/wp-json\/wp\/v2\/posts\/260042"}],"collection":[{"href":"https:\/\/datascientest.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/datascientest.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/datascientest.com\/wp-json\/wp\/v2\/users\/83"}],"replies":[{"embeddable":true,"href":"https:\/\/datascientest.com\/wp-json\/wp\/v2\/comments?post=260042"}],"version-history":[{"count":28,"href":"https:\/\/datascientest.com\/wp-json\/wp\/v2\/posts\/260042\/revisions"}],"predecessor-version":[{"id":261893,"href":"https:\/\/datascientest.com\/wp-json\/wp\/v2\/posts\/260042\/revisions\/261893"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/datascientest.com\/wp-json\/wp\/v2\/media\/260044"}],"wp:attachment":[{"href":"https:\/\/datascientest.com\/wp-json\/wp\/v2\/media?parent=260042"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/datascientest.com\/wp-json\/wp\/v2\/categories?post=260042"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/datascientest.com\/wp-json\/wp\/v2\/tags?post=260042"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}