Under six months to achieve DORA compliance!

Last month (17/07/2024) the three European Supervisory Authorities:

  • European Banking Authority
  • European Insurance & Occupational Pensions Authority
  • European Securities & Markets Authority

Published the latest of set of technical rules and templates which will be used under the Digital Operational Resilience Act (DORA).

These standards will come into force on the 17th January 2025 and in the words of the ESAs themselves include:

  • Regulatory Technical Standard on reporting major ICT-related incidents and significant cyber threats
  • Regulatory Technical Standard on harmonisation of oversight activities
  • Regulatory Technical Standard on the composition of the Joint Examination Team (JET)
  • Regulatory Technical Standard on threat-led penetration testing (TLPT)
  • Implementing Technical Standard to establish the templates for major ICT related incident reporting
  • Guidelines on estimating aggregated cost/losses caused by major ICT related Incidents
  • Guidelines on oversight cooperation

Press releases containing the releases can be found on each of the ESAs respective websites:

To mark the release of these items HANDD Business Solutions conducted a webinar discussing some of the finer details to be delivered under these Articles. You can watch the webinar on demand here.

With now under half a year to go organisations in scope for DORA should start shaping their projects to deliver compliance in accordance with the regulation.

Keep your eyes peeled on the HANDD websites and social media outlets for more DORA related content in the coming weeks.

Navigating DORA requirements can be complex, but with HANDD’s support, you can achieve compliance and improve your operations.

If this could benefit your organisation, book a FREE initial consultancy call with one of our experts here.