--- title: Are you ready for DORA? description: The Digital Operational Resilience Act (DORA) is underway – and firms need to act now to build momentum towards the January deadline. image: https://marketing.albanybeck.com/hubfs/craig-cooper-n0Xx7fsWeKM-unsplash.jpg --- [Skip to content](https://marketing.albanybeck.com/news-and-insights/are-you-ready-for-dora#main-content) # Are you ready for DORA? Author: [Miguel Angel Senra Alejandre](https://marketing.albanybeck.com/news-and-insights/author/miguel-angel-senra-alejandre) Posted in: Latest News , Insights Read Time: 2 Min Read ![](https://marketing.albanybeck.com/hs-fs/hubfs/craig-cooper-n0Xx7fsWeKM-unsplash.jpg?width=1280&name=craig-cooper-n0Xx7fsWeKM-unsplash.jpg) The Digital Operational Resilience Act (DORA) is underway – and firms need to act now to build momentum towards the January deadline. Whether you’re a bank, investment company, data reporting provider, or cloud service company, your firm is expected to be compliant by 17th January. **What are the key aims of DORA?** Created in response to the European Commission's Digital Finance Strategy, DORA aims to: - **Enhance resilience:** Improve the ability of financial institutions to withstand cyber threats and disruptions. - **Establish a consistent framework:** Put in place a uniform set of rules for managing digital operational risks across the EU. - **Promote risk assessment:** Require firms to assess their digital operational risks and implement appropriate measures to mitigate them. - **Foster governance:** Set out the governance activities required to manage risks throughout a company's lifecycle, emphasising the roles of senior management and the board. By achieving these objectives, DORA seeks to strengthen the resilience of the financial sector and ensure its ability to adapt to the evolving digital landscape. **What does DORA mean for you?** DORA imposes several key requirements on companies, including: - **Enhanced communication:** Financial organisations must establish arrangements for regular exchange of cyber threat information and have clear processes in place to respond to threats. - **Third-party risk management:** Firms must develop strategies to manage the risks associated with third-party ICT service providers, including exit plans, substitutability assessments, and testing requirements.  Third-party ICT service providers that are identified as “critical” by the European Supervisory Authorities (ESAs) may face fines of up to €5m for non-compliance. For an individual, a maximum fine of €500,000 may be imposed. - **Compliance and governance:** There are also high penalties for organisations that fail to abide by governance and regulations. The legislation states that fines of up to 2% of a firm’s total annual worldwide turnover will be distributed, and if penalties are applied to an individual, they could receive a maximum fine of €1m.  Financial entities that avoid reporting major ICT-related incidents or significant cyber threats may also face significant penalties. **Can DORA affect my organisation even if we’re based outside of the UK?** Although DORA is an EU regulation, its reach can extend beyond the EU. Companies with offices in the EU or those providing services to EU-based financial institutions may still need to comply. - For instance, a US-based business serving a US bank could be indirectly impacted if that bank operates within the EU. - While DORA hasn’t yet been adopted in the UK, it’s anticipated to become part of UK law in the near future. All organisations, regardless of their location, should review their operations to determine if they fall under DORA’s regulations and identify the necessary compliance steps. **What you need to do next** It’s important to remember that you don’t have to build digital resilience alone. Our specialists can bring the right people on board to help you meet DORA’s new regulations and avoid non-compliance. If your organisation needs support to prepare for the upcoming deadline, [get in touch with our team](https://www.albanybeck.com/contact) to learn about our expert consultants. ### Recent - [ State of The Market 2026 ](https://marketing.albanybeck.com/news-and-insights/state-of-the-market-2026) - [ Board Advisors and Diverse Teams: Driving Business Growth ](https://marketing.albanybeck.com/news-and-insights/board-advisors-and-diverse-teams-driving-business-growth) - [ Prioritising People: The hidden key to successful payment migrations ](https://marketing.albanybeck.com/news-and-insights/prioritising-people-the-hidden-key-to-successful-payment-migrations) - [ In conversation: Jason Hale on the value of fractional advisory services ](https://marketing.albanybeck.com/news-and-insights/in-conversation-jason-hale-on-the-value-of-fractional-advisory-services) Share This [mailto:?subject=Are%20you%20ready%20for%20DORA?&body=Read%20this%20post:%20https://marketing.albanybeck.com/news-and-insights/are-you-ready-for-dora](mailto:?subject=Are%20you%20ready%20for%20DORA?&body=Read%20this%20post:%20https://marketing.albanybeck.com/news-and-insights/are-you-ready-for-dora) [![](https://marketing.albanybeck.com/hs-fs/hubfs/online%20security.png?width=1080&name=online%20security.png) ](https://marketing.albanybeck.com/news-and-insights/insider-tips-to-improve-your-online-safety-and-security) #### Insider Tips to Improve Your Online Safety and Security Technology has become an integral part of our lives, it's crucial to keep ourselves safe and secure while using it. While some security measures are well-known, others may not be as obvious. In this article, we share some insider tips that only tech pros know to help you protect yourself online. [ Read More ](https://marketing.albanybeck.com/news-and-insights/insider-tips-to-improve-your-online-safety-and-security) [![](https://marketing.albanybeck.com/hs-fs/hubfs/9089_garyashworth_723156.jpg?width=1080&name=9089_garyashworth_723156.jpg) Latest News ](https://marketing.albanybeck.com/news-and-insights/managing-millennials-and-gen-z) #### Managing millennials (and Gen Z) This week, InterQuest Group Chairman, Gary Ashworth shares his views on Managing millennials (and Gen Z) on BBC Radio 4: The Bottom Line. [ Read More ](https://marketing.albanybeck.com/news-and-insights/managing-millennials-and-gen-z) [![](https://marketing.albanybeck.com/hs-fs/hubfs/pexels-fauxels-3184418.jpg?width=1080&name=pexels-fauxels-3184418.jpg) ](https://marketing.albanybeck.com/news-and-insights/commercialisation-risks-and-challenges) #### Commercialisation: Risks and challenges The squeeze on government funding has forced councils to explore new and innovative ways to maximise revenue within their districts, in order to protect the instrumental public services provided to its local communities. As a result, local authorities are shifting their strategy to a more commercial approach, utilising assets more efficiently and selling services in order to generate monies. However, commercialisation is often a complex process, with authorities required to weave through a number of challenges and risks. [ Read More ](https://marketing.albanybeck.com/news-and-insights/commercialisation-risks-and-challenges) ![](https://px.ads.linkedin.com/collect/?pid=4593538&fmt=gif) ![](https://px.ads.linkedin.com/collect/?pid=4593538&fmt=gif)