The PwC white paper explains the EU’s Digital Operational Resilience Act (DORA), effective January 2025, which sets a unified framework to ensure financial entities withstand ICT disruptions. It establishes five pillars: ICT risk management, incident reporting, resilience testing, third-party risk oversight, and cyber threat information sharing. Key challenges include aligning governance, involving all stakeholders, linking with other regulations like NIS2, and building a culture of resilience. Firms must also strengthen third-party contracts, conduct advanced testing, and adopt security by design. DORA is positioned not just as compliance, but as a driver of long-term resilience and competitive advantage.

Join for free to read