{"id":45595,"date":"2023-10-13T14:48:50","date_gmt":"2023-10-13T12:48:50","guid":{"rendered":"https:\/\/www.usd.de\/?p=45595"},"modified":"2023-10-13T14:48:53","modified_gmt":"2023-10-13T12:48:53","slug":"dora-5-tips-on-what-to-consider-during-planning","status":"publish","type":"post","link":"https:\/\/www.usd.de\/en\/dora-5-tips-on-what-to-consider-during-planning\/","title":{"rendered":"Are You Ready for DORA? If Not, Here\u2019s 5 Tips on What to Consider during Planning"},"content":{"rendered":"\n
\n
\n

The Digital Operational Resilience Act (DORA)<\/a> is a regulatory framework<\/a> that aims to ensure the operational resilience of financial institutions in the European Union. While DORA came into force on January 16, 2023, organizations were granted two years to implement its security requirements. If your institution is affected by DORA, you are probably wondering what your next steps should be to get ready. To help you get a head start, our expert for information security in the financial sector, Dr. Christian Schwartz<\/strong>, has compiled five tips on what you should consider first while preparing for DORA. While none of these starting points may be the most obvious at first, each one will have a great impact on your organization\u2019s implementation of DORA requirements and, if taken into account early on, can save you a lot of time and effort later.<\/p>\n<\/div>\n\n\n\n

\n
\"Dr.<\/figure>\n<\/div>\n<\/div>\n\n\n\n

<\/p>\n\n\n\n

<\/p>\n\n\n\n

<\/p>\n\n\n\n

<\/p>\n\n\n\n

1. Re-evaluate your method to classify services regarding criticality<\/h2>\n\n\n\n

<\/p>\n\n\n\n

Reason: <\/strong><\/h4>\n\n\n\n

\u201cCritical or important services\u201d are subject to a number of additional requirements (e.g., regarding BCM, Vulnerability Management, ICS, Resilience Testing).<\/p>\n\n\n\n

Chances: <\/strong><\/h4>\n\n\n\n

Ensuring the correct classification as \"critical or important\"<\/p>\n\n\n\n