Article

DORA in practice: What really counts after the go-live

Customer Magazin NEWS 03/2025

With the Digital Operational Resilience Act (DORA) coming into force for institutions and financial service providers, the European Union has taken a decisive step towards harmonising and strengthening IT security and resilience requirements. It is now becoming clear what hurdles institutions have to overcome, which solutions have become established – and where challenges remain.
Thorsten TewesThorsten Tewes
He has many years of professional experience in auditing, internal audit, and compliance at banks and financial services providers. As head of the Group Audit department at msg, he is responsible for risk-based audits of central processes as well as combined audits conducted in collaboration with the compliance function. In addition, he supports msg units, such as msg for banking, through targeted audits; assists with external audits in the context of outsourcing and project-related initiatives; and conducts both internal and external training sessions.
Nils WerweinNils Werwein
is a manager at msg for banking in the Governance & Regulatory Compliance division as well as M.Sc, CISA, ISO27001 Lead Auditor and Outsourcing Manager. His main focus is on ICT risk management, outsourcing management and business continuity management. He supports clients in the implementation of regulatory requirements, as well as in the implementation of (IT) audits and project support.
18/12/25
918 views
2 minutes reading time
Digitalisation, Regulatory Law
DORA in practice: What really counts after the go-live

Why DORA is more than just another set of rules

With the entry into force of the Digital Operational Resilience Act (DORA) for institutions and financial service providers, the European Union has taken a decisive step towards harmonising and strengthening IT security and resilience requirements. DORA formulates a uniform regulatory framework designed to ensure operational resilience – i.e. the ability to cope with IT-related disruptions and attacks.

For institutions, this means not only compliance, but also a significant change in how they deal with IT risks, service provider management and internal control systems.

Sie möchten mehr lesen?

Sie haben bereits ein Konto? Dann loggen Sie sich einfach ein. Sie sind neu auf Banking.Vision? Registrieren Sie sich und nutzen Sie kostenfrei alle Inhalte.

Sie sind neu auf Banking.Vision?

Hier können Sie sich kostenfrei registrieren. Füllen Sie einfach das Formular aus und profitieren Sie von einem uneingeschränkten Zugriff auf sämtliche Inhalte von Banking.Vision.

Email
Password
Salutation
First Name
Last Name
Company
Country
<p>Sie bestätigen hiermit, dass wir Ihre Daten und Ihr Nutzungsverhalten vertraulich speichern, auswerten und verarbeiten dürfen. Ihre Daten werden nicht an Dritte weitergegeben. <a class="text-primary" href="https://banking.vision/datenschutzerklaerung/" target="_blank" rel="noopener">Datenschutzerklärung</a></p>
WORDPRESS_URL: https://admin.banking.vision/wp-json