As digital infrastructure becomes increasingly central to financial stability, the EU’s Digital Operational Resilience Act (DORA) marks a pivotal shift in how operational risks are managed across the financial ecosystem.

DORA not only reinforces the importance of resilience in the face of cyber threats and technological disruptions but also expands regulatory oversight to include critical Information and Communication Technology (ICT) third-party service providers.

This evolution signals a broader global trend: resilience is no longer a niche compliance requirement but a foundational expectation across the ICT landscape. For critical third-party providers and financial institutions alike, early alignment with DORA’s standards may be key to maintaining competitiveness and trust in a rapidly transforming market.

Our Risk Consulting team has analysed the relevance of DORA and outlined the next steps for ICT third-party service providers in detail. Download the below report to get the insights.

Get in touch

Whether you require additional resources or expert knowledge, the skills across our Consulting practice can be drawn upon to aid with the various aspects of your DORA programme.

If you would like to discuss how KPMG can provide guidance and support on your DORA compliance journey, please get in touch with our Technology Risk Consulting Team. We’d be delighted to hear from you.

Discover more in Risk Consulting