Digital resilience: the clock is ticking

• The EU Digital Operational Resilience Act (DORA) is due to be implemented from 17 January 2025.
• The UK has also received a major update via the new critical third parties oversight regime, and the crossover between the EU and UK regimes will be an interesting feature to monitor as the new rules mature.

The clock is ticking on the remainder of the EU Digital Operational Resilience Act (DORA) implementation period, and the deadline of 17 January 2025 will shortly be upon us. In-scope organisations throughout the sector will have been busy preparing for this moment, but as it arrives it is worth also taking stock of the potential impact on UK-based organisations.

DORA is part of the EU digital finance package and is designed to address risks posed to the financial services sector by technological disruptions and digital threats, such as cybersecurity incidents.