Digital Operational Resilience Act (DORA)

What Is the Digital Operational Resilience Act (DORA)?

The Digital Operational Resilience Act (DORA) is an EU regulation that establishes uniform requirements for the security of network and information systems supporting the business processes of financial entities — including ICT risk management, incident reporting, and third-party ICT service provider oversight.

DORA explicitly addresses third-party ICT risk, including software supply chain risk in the financial sector. It requires financial entities to manage and monitor risks from their ICT providers, including software, and to maintain the evidence to demonstrate that management. NetRise Turbine supports DORA alignment by providing independent visibility into the software financial entities operate and the third-party products they depend on.

Related Terms

EU Cyber Resilience Act · Third-Party Risk Management · Software Supply Chain Security