Digital operational resilience act (DORA)

The Single Rulebook – encompassing all EU legislation governing financial institutions – barely touches on operational risks relating to information and communications technologies (ICT). In September 2020, the Commission tabled a proposal for a regulation on the digital operational resilience of the financial sector (DORA), to introduce and harmonise key digital operational requirements across the EU, so as to make ICT operations resilient in the face of severe operational disruption and cyber-attacks.