© Copyright Acquisition International 2025 - All Rights Reserved.

Article Image - DORA: Five Ways the Channel Can Prepare
Posted 3rd April 2024

DORA: Five Ways the Channel Can Prepare

The Digital Operational Resilience Act (DORA) will soon establish a universal framework for managing, reporting and outsourcing IT risk for the European Union (EU)’s financial sector. Looking to mitigate a recent rise in cyber attacks on the industry, the legislation will require organisations to withstand, respond to and recover from related disruption – ensuring they remain operational in the event of an attack.

Mouse Scroll AnimationScroll to keep reading

Let us help promote your business to a wider following.

DORA: Five Ways the Channel Can Prepare
Digital solutions

Petter Glenstrup, Director, Sales Engineering at Arctic Wolf and AJ Thompson, COO at Northdoor plc

The Digital Operational Resilience Act (DORA) will soon establish a universal framework for managing, reporting and outsourcing IT risk for the European Union (EU)’s financial sector. Looking to mitigate a recent rise in cyber attacks on the industry, the legislation will require organisations to withstand, respond to and recover from related disruption – ensuring they remain operational in the event of an attack.

Organisations and their third-party providers, including those that provide digital and IT solutions, will be expected to comply with the regulation by January 2025. It’s therefore crucial IT service providers and the wider channel understand how the legislation will affect them now, and are prepared for its introduction. While it can be difficult to know where to start, below are five simple steps your organisation can take to ensure it meets the requirements for cyber resiliency outlined in the legislation. This will ensure your business, and the wider channel, remains DORA-compliant in the months and years ahead.

1. Determine whether your organisation will need to comply

DORA applies to all financial institutions in the EU, including banks, insurance companies and investment firms – regardless of their size or revenue. However, it also extends to third party suppliers throughout an organisation’s supply chain. This means even the businesses which supply financial services organisations with IT systems and services – whether that’s cloud providers, data centres or even AI vendors – must also ensure they comply with the requirements.

It’s therefore crucial every business across the supply chain, from resellers to partners, is taken into account when preparing for the legislation. For channel organisations, in particular, this means it’s important to ensure they’re partnering with and selling to DORA compliant organisations only. This is because failure to comply could lead to heavy financial penalties, meaning it’s vital organisations across the board meet its requirements.

2. Identify gaps in your identification, reporting and testing procedures

DORA will require organisations to prove that they can withstand IT-related disruption, including cyber attacks. This means it’s vital leaders take the time to understand where the existing gaps lie in their organisation’s line of defence – as well as how they identify, report and recover from an incident. Conducting a risk assessment of your organisation and its wider supply chain can allow you to identify the areas of vulnerability in your network and develop a plan of action to address these. This should include evaluating the key areas DORA will assess, including incident reporting, scenario testing and risk governance, and should also extend to third party providers.

3. Develop a plan of action to address these

Once you have conducted a risk assessment of your organisation, you can then start developing a plan of action for compliance. This should meet the requirements outlined in Article 6(8) of the DORA legislation, and should explain how an IT risk management programme supports your organisation’s business objectives and wider strategy. It should also establish a risk tolerance level, explain your organisation’s existing IT infrastructure, outline the different mechanisms in place to detect an incident and include a comprehensive strategy for communicating within your organisation and to the wider public in the event of an attack.

4. Conduct regular employee training

Alongside establishing a risk management programme, DORA also mandates security awareness and digital operational resilience training for board members, senior management figures and employees. This should be an important focus given an estimated 60% of data breaches are caused by insider threats – whether that’s deliberate or accidental. It’s therefore crucial every member of your organisation is educated on IT risk and how to spot the key signs of an attack via regular workplace cybersecurity training. This should also cover what to do in the event of an attack – including reporting an incident to your IT teams.

5. Regularly review and update your plan

Once the legislation has been implemented beyond 2025, each eligible organisation will have their risk management plan reviewed either, at least once a year, or periodically for smaller businesses, as well as upon the occurrence of an IT-related incident. It’s therefore important these plans are regularly reviewed internally to ensure they still comply and are continuously improved and updated in line with the legislation’s requirements where necessary. This will not only ensure your organisation remains compliant with the new regulations, but that your wider operational resilience strategy stays effective over time.

By understanding and implementing the above steps, financial service organisations and their suppliers can ensure they’re prepared ahead of the implementation of DORA in early 2025. While a year might feel like a long time to ensure compliance, organisations who don’t start preparing now will find it difficult to get everything in order in time. The time to act is now – before it’s too late.

Categories: Innovation, News, Strategy


You Might Also Like
Read Full PostRead - Eye Icon
4 Basics of Boosting Employee Morale
Leadership
15/11/20224 Basics of Boosting Employee Morale

Behind any organization and company's success is a team of happy, healthy, and satisfied employees. Any business with high employee morale tends to enjoy a healthy work culture and well-engaged employees and won't have any problem sourcing or attracting the be

Read Full PostRead - Eye Icon
Time-Saving Technology to Enhance Professional Businesse
News
06/05/2024Time-Saving Technology to Enhance Professional Businesse

The more time something takes in business, the more money it costs, and the smaller your profit margin can be. As a business owner, it’s only natural to seek out time-saving tech to enhance your business and boost your bottom line.  However, knowing

Read Full PostRead - Eye Icon
A Strong Footing in the Stock Market: Exploring Investment Strategies
Finance
10/03/2022A Strong Footing in the Stock Market: Exploring Investment Strategies

Standing at about $93 trillion, the stock market seemed primed for a next mega move that could thrust its valuation to over $100 trillion--or better. This is impressive, but what are the best strategies to become a part of this super wave?

Read Full PostRead - Eye Icon
Making Mobile Devices More Magnificent
Innovation
05/01/2021Making Mobile Devices More Magnificent

Resonant is changing the way that radio frequency (RF) filters are designed and, in the process, has disrupted and transformed the market and supply chain for RF front-ends (RFFE). The company has used these tools to develop XBAR, a new resonator technology th

Read Full PostRead - Eye Icon
Providing a Positive Change
News
01/08/2019Providing a Positive Change

Intengine’s role is to help bridge the gap between shared social and environmental objectives, and the means and knowledge required to achieve their fulfilment.

Read Full PostRead - Eye Icon
Great Canadian Gaming’s Acquisition of Casino New Brunswick
M&A
28/05/2015Great Canadian Gaming’s Acquisition of Casino New Brunswick

Great Canadian Gaming's Acquisition of Casino New Brunswick

Read Full PostRead - Eye Icon
KPS Capital Partners to Sell WWRD to Fiskars Corporation
Finance
11/05/2015KPS Capital Partners to Sell WWRD to Fiskars Corporation

KPS Capital Partners, LP announced that it signed a definitive agreement, through an affiliate, to sell its portfolio company, WWRD Holdings Limited to Fiskars Corporation.

Read Full PostRead - Eye Icon
Who Are the Best UX Companies of 2025? 5 Top Options, Ranked
News
27/03/2025Who Are the Best UX Companies of 2025? 5 Top Options, Ranked

Who Are the Best UX Companies of 2025? 5 Best Options, Ranked User experience (UX) design is about more than the appearance of a website or product interface. Creating engaging experiences is what sets companies apart from the competition. A design that accoun

Read Full PostRead - Eye Icon
Defense Experts in the Areas of DNA Profiling
Innovation
26/11/2018Defense Experts in the Areas of DNA Profiling

Dean A. Stetler and Associates, Inc provides their expertise and knowledge of biological science, particularly of DNA profiling, to criminal defenses. Recently, we profiled both Dean Stetler and Dean A. Stetler and Associates, Inc to discover more about the aw



Our Trusted Brands

Acquisition International is a flagship brand of AI Global Media. AI Global Media is a B2B enterprise and are committed to creating engaging content allowing businesses to market their services to a larger global audience. We have 14 unique brands, each of which serves a specific industry or region. Each brand covers the latest news in its sector and publishes a digital magazine and newsletter which is read by a global audience.

Arrow