Explaining DORA: Implications for ICT-third party service providers across the globe

The Digital Operational Resilience Act (DORA) is a new piece of European legislation, due to become applicable on 17 January 2025, that sets out comprehensive requirements for financial entities regarding management of ICT third-party risks, as well as introducing an Oversight Framework for critical ICT third-party service providers.

Whilst the bulk of DORA requirements are addressed to financial entities, some of it will have some meaningful implications for ICT third-party services providers that work with European financial entities. In this short webinar, our European regulatory and compliance team will discuss:

• Key DORA requirements relevant to third-party ICT service providers, including rules on contracting and sub-contracting
• Cross-border implications
• Oversight Framework for critical ICT third-party service providers
• Relevant timelines
• Practical insights on managing compliance readiness

We will close the webinar with a short Q&A so please do come with your questions.