Contact sales

Leave your details and we'll get back to you shortly.

Stay informed about Hy5 features, compliance insights, and regulatory updates.

We'll use your details solely to respond to your enquiry.

What does DORA require of your organisation?

As of 17 January 2025, the Digital Operational Resilience Act applies across the EU. DORA sets binding requirements for ICT risk management, incident reporting, and third-party oversight for financial entities and their critical technology providers.

Here we gather the questions we encounter most often: who is in scope, what is required in practice, and what structured DORA compliance work actually looks like.

Articles about
DORA

DORA and third-party risk: what does the regulation actually require?

DORA sets clear requirements for how financial entities manage their ICT providers. We break down what the regulation actually demands — and what it means for how the work needs to be organised.

How to build a structured DORA compliance programme

Most organisations know what DORA requires. The challenge is operationalisation. Here is how to build a DORA programme that holds up over time.

What does non-compliance with DORA actually cost?

What does non-compliance with DORA actually cost? We cover sanctions, supervisory triggers and what it means for your compliance programme.

Contact sales

Leave your details and we'll get back to you shortly.

Stay informed about Hy5 features, compliance insights, and regulatory updates.

We'll use your details solely to respond to your enquiry.