Topic

DORA

5 articles · dora

DORA

DORA's First Oversight Cycle: What CTPP Designation Means for the Firms That Depend on Them

The ESAs named their first critical ICT third-party providers. Most of the commentary focused on the providers. The more interesting consequences land on their customers.

ROOTKeySep 10, 2026

Compliance 7m

DORA and NIS2 Overlap: Building One Evidence Layer for Dual-Regulated Financial Entities

Many financial institutions are quietly running two separate compliance programmes for requirements that ask nearly the same question twice.

ROOTKeyAug 31, 2026

Compliance 7m

DORA's Register of Information: The Third-Party Risk Deadline Most Financial Firms Are Quietly Missing

The Register of Information is the least discussed and most operationally demanding requirement in DORA. Here is why it keeps tripping up firms that consider themselves compliant.

ROOTKeyAug 24, 2026

Compliance 7m

DORA ICT Third-Party Risk Management: The Technical Implementation Guide for 2026

DORA is in full effect for EU financial entities. The ICT third-party risk management requirements are the hardest to operationalise. Here is how.

ROOTKeyJul 13, 2026

Compliance 7m

DORA Compliance in 2026: How Financial Institutions Build Defensible Resilience

With DORA now in full enforcement, financial institutions need more than paper policies - they need verifiable, audit-ready evidence that holds up under supervisory scrutiny.

ROOTKeyJul 3, 2026

Get cyber-resilience insights in your inbox

Practical, audit-ready guidance on data integrity, compliance and continuity - delivered as we publish.