The EU’s proposal for an EU-Regulation on a Digital Operational Resilience Act (DORA) proposes to introduce an EU-wide harmonized rulebook for digital operational resilience, including identification, mitigation and management of cyber-risk, outsourcing and concentration risk. DORA will affect those firms that are defined as “financial entities”, as well as those that are information and communications technology (ICT) third-party service providers. Further rules apply to those that are defined as critical service providers. This Client Alert assesses the further details of DORA and concurrent efforts by other global financial services policymakers that could impact the proposed EU-27 regime’s evolution ahead of the EU’s own efforts in revising the Directive on security of network and information systems.

Read the full article here.

Read our first coverage of this topic: DORA’s debut - the EU’s Digital Operational Resilience Act.