DORA (EU Digital Operational Resilience Act)

The Digital Operational Resilience Act (DORA) is an EU regulation that has applied since 17 January 2025. It sets ICT risk-management, incident-reporting, resilience-testing and third-party-risk requirements for financial entities and their critical ICT providers.

Why it matters at a CIO Cafe table

Terms like DORA (EU Digital Operational Resilience Act) turn up at tables because the disagreement is usually about scope, not definition. Agreeing what the word means is the cheapest way to shorten a decision — which is why every table starts by framing the question in plain language.