CIOs and CISOs grapple with DORA: Key challenges, compliance complexities

In force since January, the Digital Operational Resilience Act (DORA) has required considerable effort from CIOs and CISOs at 20 types of financial entities to achieve compliance. For many, the journey is not complete.

“In the past months, financial entities targeted by DORA have been busy internally defining roles and responsibilities related to ICT security, identifying the major risks within essential and important functions, developing a cyber threat management framework that includes policies and procedures for monitoring ICT resources, and preparing the necessary measures to ensure control of the supply chain,” emphasizes Giulia Mariuz, a lawyer at law firm Hogan Lovells.