{"id":35668,"date":"2026-07-14T10:09:03","date_gmt":"2026-07-14T08:09:03","guid":{"rendered":"https:\/\/www.pkf-attest.es\/services\/governance-risk-compliance\/dora-regulation\/"},"modified":"2026-07-14T10:09:03","modified_gmt":"2026-07-14T08:09:03","slug":"dora-regulation","status":"publish","type":"page","link":"https:\/\/www.pkf-attest.es\/en\/services\/governance-risk-compliance\/dora-regulation\/","title":{"rendered":"DORA Regulation"},"content":{"rendered":"
\r\n\t
\r\n\t\t\t\t\t

\r\n\t\t\t\tDora Regulations\t\t\t\r\n\t\t\t<\/h1>\r\n\t\t\t\r\n\r\n\t\t\t\t\t\r\n\t<\/div>\r\n<\/div>\r\n\n\n\n
<\/div>\n\n\n\n
\n
\n

What is the DORA Regulation?<\/strong><\/h2>\n\n\n\n

It is theDigital Operational Resilience<\/strong> Act<\/strong>(DORA<\/strong>), which aims to achieve a high level of digital operational resilience by establishing requirements relating to the security of information systems that support the processes of financial institutions.<\/h4>\n\n\n\n

This Regulation seeks to improve existing European Union rules on operational risk<\/strong>, particularly in relation to threats related to information and communication technologies (ICT)<\/strong>. It also establishes specific technological guidelines for areas such as risk management, incident reporting, operational resilience testing, and monitoring of third-party risk.<\/p>\n\n\n\n

<\/div>\n\n\n\n

PKF Attest the implementation of DORA<\/h2>\n\n\n\n

At PKF Attest, we offer services designed to facilitate compliance with the requirements established by DORA, providing comprehensive solutions that help organizations effectively adapt to its demands.<\/p>\n<\/div><\/div>\n<\/div><\/div>\n\n\n\n

<\/div>\n\n\n\n
\n
\n

DORA compliance plan<\/strong><\/h2>\n\n\n\n

A detailed compliance plan that addresses every facet of DORA compliance.<\/p>\n\n\n\n

At PKF Attest, we offer comprehensive support to ensure your organization is ready to face the challenges of DORA. Our services include:<\/p>\n<\/div><\/div>\n<\/div><\/div>\n\n\n\n

\n
\n
\n
\n

Independent Diagnosis (Gap Analysis)<\/strong><\/p>\n<\/div><\/div>\n<\/div><\/div>\n\n\n\n

\n
\n

Assessment of the current level of compliance with DORA.<\/p>\n<\/div><\/div>\n<\/div><\/div>\n\n\n\n

<\/div>\n<\/div><\/div>\n\n\n\n
\n
\n
\n

Detailed Adaptation Plan<\/strong><\/p>\n<\/div><\/div>\n<\/div><\/div>\n\n\n\n

\n
\n

Specific actions to be implemented to ensure compliance with DORA<\/p>\n\n\n\n

<\/div>\n<\/div><\/div>\n<\/div><\/div>\n<\/div><\/div>\n\n\n\n
\n
\n
\n

Design and Development of Procedures and Controls<\/strong><\/p>\n<\/div><\/div>\n<\/div><\/div>\n\n\n\n

\n
\n

Including key areas such as IT Governance, ICT Risk Management, Incident Management, Business Continuity, Outsourcing, and Cloud Services.<\/p>\n<\/div><\/div>\n<\/div><\/div>\n<\/div><\/div>\n\n\n\n

\n
\n
\n

Digital Operational Resilience Testing Assessment<\/strong><\/p>\n<\/div><\/div>\n<\/div><\/div>\n\n\n\n

\n
\n

Ensuring solid preparation to deal with potential disruptions.<\/p>\n\n\n\n

<\/div>\n<\/div><\/div>\n<\/div><\/div>\n<\/div><\/div>\n\n\n\n
\n
\n
\n

Training and Awareness<\/strong><\/p>\n\n\n\n

<\/div>\n<\/div><\/div>\n<\/div><\/div>\n\n\n\n
\n
\n
<\/div>\n\n\n\n

Providing specialized training programs, including training for the Board of Directors in ICT risk management.<\/p>\n\n\n\n

<\/div>\n<\/div><\/div>\n<\/div><\/div>\n<\/div><\/div>\n<\/div><\/div>\n\n\n\n
\n
\n

Internal Audits<\/strong><\/h2>\n\n\n\n

We assist internal audit departments with technology-specialized auditors:<\/p>\n\n\n\n

> We evaluate the GAP Analysis and the DORA compliance plan<\/strong> developed by the entity.<\/p>\n\n\n\n

> We updated our audit work programs<\/strong> to incorporate DORA requirements.<\/p>\n\n\n\n

> We identify specific audits to <\/strong>verify correct implementation.<\/p>\n\n\n\n

> We perform<\/strong> specific audits<\/strong>, including those that internal audit must address (such as evaluating the ICT risk management framework, reviewing comprehensive response and recovery plans, and evaluating ICT service providers).<\/p>\n<\/div><\/div>\n<\/div><\/div>\n\n\n\n

\n
\n
\n
\n
\"Logo<\/figure>\n<\/div><\/div>\n\n\n\n
\n

DORA requires that these audits be performed by auditors specializing in Information Technology, a service that PKF Attest with excellence.<\/strong><\/p>\n<\/div>\n<\/div>\n<\/div><\/div>\n<\/div><\/div>\n\n\n\n

<\/div>\n\n\n\n
\n
\n

When does the Digital Operational Resilience (DORA) regulation come into effect?<\/h3>\n\n\n\n

On January 16, 2023, the DORA (Digital Operational Resilience Act) regulation came into force.<\/strong><\/strong>.<\/p>\n\n\n\n

It is crucial to note that the deadline for implementing DORA expires on January 17, 2025<\/strong>. This regulation affects various financial sectors, such as banks, insurance companies, investment services companies, and credit rating agencies. Each entity must comply with substantial requirements, ranging from the implementation of an ICT risk management framework to intensified monitoring of cyber threats and the reporting of serious incidents.<\/p>\n<\/div><\/div>\n<\/div><\/div>\n\n\n\n

\n
\n
\"Expertos<\/figure>\n<\/div><\/div><\/div>\n\n\n\n
\n

Interventions as experts in the DORA regulation<\/h3>\n\n\n\n

> The race against time for the DORA Regulation<\/a><\/h3>\n\n\n\n

> Session on the new DORA regulation<\/a><\/h3>\n\n\n\n
\n
\n

<\/p>\n<\/div><\/div>\n<\/div><\/div>\n<\/div><\/div>\n<\/div><\/div>\n\n\n\n

<\/div>\n\n\n\n
\n
\n

The most secure digital revolution for financial institutions<\/strong><\/p>\n\n\n\n

DORA, a consistent incident reporting mechanism that reduces administrative burdens for financial institutions and raises awareness about cybersecurity.<\/p>\n<\/div><\/div>\n<\/div><\/div>\n\n\n\n

\n
\n
<\/div>\n<\/div><\/div>\n\n\n\n
\n

<\/p>\n<\/div><\/div>\n<\/div><\/div>\n\n\n\n

<\/div>\n\n\n\n
\n
\n

Contact with us<\/strong><\/h2>\n\n\n\n

We help you implement the Digital Operational Resilience regulation.<\/strong><\/p>\n\n\n\n

It is time for protection, detection, containment, recovery, and repair in the face of ICT-related incidents.<\/p>\n\n\n