A great overview of DORA, if it becomes law.

← Back to Blog

A great overview of DORA, if it becomes law. Time will codify ICT risks under DORA for EU Financial services firms as DORA takes precedence.

DORA is significant legislation for EU Finance firms, placing requirements on organisations to manage their ICT risks and those of their critical third party suppliers. Implement appropriate governance, identify roles, responsibilities and functions for ICT risk management. Implement a risk management framework, an ISMS, appropriate policies, procedures and controls, test ICT risk management compliance and undergoe independent assessment of compliance by appropriate regulators. Following the NIST Identify, defence, protection, respond and recover structure.

For EU Financial Services this comes at a time when the SEC is proposing cybersecurity risk management, strategy, governance and incident reporting legislation.

Ted Dziekanowski

#dora #cybersecurity #cyberriskmanagement #ictrisk #eu

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A6932239836057636864

Categories

Cyber Risk Management, Cybersecurity, Regulation & Compliance

Tags