The January 2025 deadline for DORA compliance is approaching.

← Back to Blog

The January 2025 deadline for DORA compliance is approaching. Comments by the Chair of the Joint European Supervisory Authorities (ESAs) Sub-Committee on Digital Operational Resilience, at a recent DORA event highlighted the pace of change of cybersecurity regulation in the EU. DORA (and EN NIS2) sets out a regulatory framework for boards of covered Financial Institutions for the management of ICT risk.

Speech by Gerry Cross – https://lnkd.in/eXjFFQCs

We have always maintained that DORA is a regulatory framework, with legal powers of enforcement. ‘First of all, these regulations represent the legal reality as mandated by the co-legislative authorities. It is outside the power of any ESA or competent authority to alter this fact.’ A fact that boards should consider carefully when developing their compliance programs.

Veritas GRC board programs address board governance and compliance to DORA, EU NIS 2 and the SEC final rule, through the lens of legal, audit, cyber and risk management.

@Thaddeus Dziekanowski Brian D. McCarthy

Veritas GRC Central Bank of Ireland European Parliament

#dora #ictrisk #cybersecurityriskmanagement #cybersecurity

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7215992028352966657

Categories

Cybersecurity, Governance & ESG, Regulation & Compliance

Tags