Skip to main content

DORA

WHY DORA MATTERS

The Digital Operational Resilience Act (DORA) underscores the importance of robust risk management for financial organisations. Effective from January 17, 2023, DORA mandates financial institutions to align their operations with its requirements by January 17, 2025. This regulation aims to enhance the cyber resilience of financial entities, ensuring they can manage, monitor, and mitigate non-financial risks efficiently

image-wrapper

Step-by-step guide DORA

Download our step-by-step guide to DORA compliance! Find out more about DORA and learn how to prepare the scope of your DORA project, and the project phase of an DORA implementation and audit.

industry-image
Analyses

DORA Fit-Gap analyses

Securance conducts the DORA Fit Gap analysis in accordance with the main topics and sub-topics below, which will also be reflected in the Fit-Gap report.

Background Image

ICT Risk Management (art. 5 to 16)

  • Governance provisions
  • ICT Risk Management Framework
  • Technical requirements (identify, protect, detect, response, recovery, ....)

 


 

ICT-related incidents (art. 17 to 23)

  • ICT related incident management process
  • Classification of ICT-related incidents and cyber threats
  • Reporting of major ICT-related incidents to authorities

Digital operational resilience testing (art. 24 to 27)

  • Digital operational resilience testing programme
  • Range of relevant tests
  • Threat led penetration testing

Managing of ICT Third-Party risk (art. 28 to 44)

  • General requirements (including register of 3rd-party providers and key contractual provisions)
  • Oversight of the critical ICT third-party service providers

Our approach

Our approach involves five key steps. First, we analyse all relevant regulations to ensure compliance. Next, we assess the current state of the client’s compliance and identify any gaps. We then define a tailored action plan to address these gaps. Our experts implement the plan, following best practices. Finally, we empower our clients with the tools and knowledge needed to maintain compliance independently.

approach-step-img
magnifier
Step - 1
Analysis of applicable regulation

Our expert analyses all applicable laws and regulations for the client.

dollar_bag
Step - 2
Scan of status quo

Our expert assesses the extent to which the client complies.

target
Step - 3
Defining action plan

Our expert defines the action plan for compliance.

anchor
Step - 4
Implementation

Our expert implements the action plan in accordance with best practises.

pencil
Step - 5
Client empowerment

Our expert ensures that the client has the tools to remain compliant in the future.

approach-step-img

Frequently Asked Questions

DORA is a comprehensive regulation focused on strengthening the digital operational resilience of financial institutions within the EU. It sets stringent requirements for ICT risk management, periodic testing of digital resilience, and the management of risks related to outsourcing to critical third parties.

With increasing digital dependencies, financial institutions are more vulnerable to cyberattacks and data breaches. DORA provides a structured framework to enhance their cyber resilience, ensuring they can withstand, respond to, and recover from ICT-related disruptions.

Early adoption of DORA’s requirements allows organisations to identify and address potential gaps in their ICT risk management practices. Starting now ensures compliance by the 2025 deadline and positions your organisation to handle emerging threats more effectively.
Testimonials

What our Clients Say

Working with Securance was a revelation. They succeeded in developing a risk management policy and assessment that not only elevated our professional standards but also truly fit the nature and scale of our organisation.

Laura Wessemius-Chibrac

CEO stichting NAB impact investing

The critical and reflective dialogue with Securance has enabled us to view challenges from different perspectives and find the best solutions. They were willing to act not only as an advisor or executor but truly as an extension of our organisation.

Jean-Paul van Haarlem

Chief Executive Officer ONVZ

Securance professionally guided the implementation process from start to finish. They helped us find the delicate balance between risk management and the feasibility of control measures. In addition to implementing best practices, they placed strong emphasis on gaining support from our workforce and transferring knowledge to our own team.

Richard de Groot

Director of Asset Management ABN AMRO

Our Partners

Securance as your DORA partner

At Securance, we believe in maintaining robust internal controls and promoting integrity within business operations. Our services are tailored to meet the stringent requirements set by regulatory bodies, ensuring your organisation is always compliant and resilient. As your dedicated implementation partner, we bring deep expertise and a proven track record in successfully managing risk and compliance challenges across various industries.