What does it mean to be secure in your sector? While every organization has its own cyber security policies, numerous pieces of legislation also set out minimum requirements for security that firms must reach or else be held accountable through fines.

The EU’s Digital Operational Resilience Act – which came into force in 2023 and applies from 17 January 2025 – aims to do just this for financial entities within the region. 

But what does being DORA-ready mean in practice? And how will the legislation add to the responsibilities of IT professionals?

In this episode, Jane and Rory speak to John Stevenson, Technical Director at Skybox, to better understand the EU’s Digital Operational Resilience Act and what it means for businesses.

Read more:

• What is the EU’s Digital Operational Resilience Act (DORA)?
• DORA and why resilience (once again) matters to the board
• ‘Borderline irresponsible’ attitude to third party risks must change, says expert
• Supply chain attacks are still plaguing enterprises – here's why