DORA Policies

DORA (Data protection, Operational resilience, Recovery, and Advanced Cyber Defence) Policies provide a strategic framework for an organisation to manage its cyber risks. By focusing on key areas of resilience and defence, these policies help to ensure continuous operations and protect critical assets. These policies are critical for organisations dealing with personal and financial information to remain compliant with regulations.

Sectors

  • Financial sector
  • Asset management
  • Insurance companies
  • Banks
  • Investments
  • Stockbrokers

Key components

  • ICT risk management (identifing, classifying and mitigation)
  • Incident reporting (both internal and to the authorities)
  • Reliance testing (pentesting and vulnerability testing)
  • 3rd party risk management
  • Information sharing
  • Harmonisation
  • Governance and accountability

Pricing

Time estimates start from 12 hours to achieve DORA compliance, assuming the client already has ICT and Cybersecurity policies in place as above.

Regulatory Impact