What Is DORA?
The Digital Operations Resilience Act (DORA) is a piece of EU legislation relating to the cyber security and digital of financial institutions...
Which Organisations Does DORA Apply to?
DORA is applicable to a wide range of organisations in the financial sector, including banks, insurance companies...
How does DORA differ from ISO 27001?
If your organisation is already certified to ISO 27001, this will provide a strong starting point for compliance with DORA, as the two cover...
How is DORA structured?
DORA is structured around five core ‘pillars’ that relate to ICT and cyber security, which aim to provide a comprehensive digital resiliency framework for financial organisations...
What are the regulatory technical standards (RTS) and implementing technical standards (ITS)?
In addition to DORA itself, the European Supervisory Authorities (ESAs) have produced a number of regulatory technical standards (RTS)...
How is DORA enforced?
DORA is enforced by designated regulators in each EU member state, known as competent authorities. These competent authorities can request that financial organisations implement...
related BLog
DORA - The Digital Operations Resilience Act
Published on
5 Jun
2025
URM’s blog discusses the EU’s Digital Operation’s Resilience Act (DORA), explaining who it will apply to, its requirements, how it will be enforced, and more.
Read more
Information Security
Published on
10/7/2025
ISO 27001:2022 - A.5 Organisational Controls (Legal, Regulatory and Contractual)URM’s blog explains the legal, regulatory & contractual controls in ISO 27001 & how they can be implemented in full conformance with the Standard.
Read more
Information Security
Published on
27/6/2025
ISO 27001:2022 - A.5 Organisational Controls (Supplier Management)URM’s blog explains the importance of the 5 supplier management controls in ISO 27001 & provides practical guidance on how to implement each control.
Read more
Information Security
Published on
27/6/2025
ISO 27001:2022 - A.5 Organisational Controls (Access Management)URM’s blog explores why the access controls in ISO 27001 matter, and how to implement each control in full conformance with both the Standard and best practice.
Read more
"
Whenever we have asked our QSA and account manager whether additional work is required outside of the annual cycle, there has never been a hard sell of any of URM’s services, and instead offer advice based on our compliance requirements and business needs.
CISO at University of Surrey
contact US
Let us help you
Let us help you in your compliance journey by completing the form and letting us know how we can best support you.