The EU’s Digital Operational Resilience Act, or DORA, comes into force in January 2025. So there is not much time for affected organisations to prepare.

DORA sets out to improve cybersecurity — or ICT risk management — across the EU’s financial services sector.

The Act covers both regulated firms and what the EU terms “critical third parties” in their supply chains. In fact managing third party risk is a big part of DORA, along with measures such as improved resilience testing, incident management plans, and strict reporting requirements.

Our guest is DORA expert and director of consulting firm SECFORCE Rodrigo Marcos.