DORA: A key framework for the digital resilience of the European financial sector

With the entry into force of the Digital Operational Resilience Act (DORA) in January 2025, Europe is developing a rigorous framework to strengthen the digital resilience of financial institutions in the face of growing cyber threats and accelerated digital transformation.

FACTS

• The risk of economic decoupling between France and the United States underlines the need to strengthen the resilience of the financial sector, particularly in the area of cybersecurity.

• To meet this challenge, the DORA regulation was gradually introduced with its entry into force on 17 January 2025.

• DORA requires companies to put in place a strict framework for managing ICT risks (Information and Communication Technologies).

ISSUES

• Strengthening European financial resilience: Faced with the risk of economic decoupling with the United States, Europe must consolidate its financial markets to remain competitive. DORA protects these markets by imposing robust digital risk management rules. MFA This is seen as a lever to strengthen stability, transparency and competitiveness, particularly in the non-listed sectors and securitisation.

• Framework digital innovation: In France, the adoption of innovations such as tokenisation requires a secure framework. DORA guarantees resilience to technological crises, supporting AMF in its initiatives, including MiCA (Markets in Crypto-Assets).

• Preserving Cyber Security: With 46% financial institutions identifying ransomware as the main threat, investments in DORA compliance become strategic. Almost 47% of companies investing more than EUR 1 million underline its importance for enhancing digital security.

PERSPECTIVE

• With the increased digitalisation of our means of payment, actors such as Adyen, Silae or even Matmut understood that data protection is no longer an option. By adopting the GDPR, they demonstrated their willingness to comply with safety requirements. In addition, DORA is required to secure the resilience of financial infrastructure to cyber threats.

• However, compliance with DORA not yet finalized, which implies that it can evolve at any time. Companies must therefore remain vigilant and be prepared to adapt to possible regulatory changes.

Traduit automatiquement via Libretranslate / Automatically translated via Libretranslate